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1. Introduction. 

The topics that we will discuss have their origin in Mazur's synthesis of the 
theory of elliptic curves and Iwasawa's theory of Zp-extensions in the early 
1970s. We first recall some results from Iwasawa's theory. Suppose that F 
is a finite extension of Q and that Foo is a Galois extension of F such that 
Ga.l{Fao/F) = Zp, the additive group of p-adic integers, where p is any prime. 
Equivalently, Foo = [Jn>o Fn, where, for n > 0, Fn is a cyclic extension of 
F of degree p" and F = i^o C Fi C • • • C C F„+i C • • • . Let /i„ denote 
the class number of Fn, p"^" the exact power of p dividing /i„. Then Iwasawa 
proved the following result. 

Theorem 1.1. There exist integers X, fj,, and u, which depend only on Fao/ F , 
such that e„ = An + /^p" + v for n ^ 0. 

The idea behind the proof of this result is to consider the Galois group 
X = Gal{Lao/ Foo), where L^o is the maximal abelian extension of F^c which 
is unramified at all primes of Foo and such that Gal(Loo/Foo) is a pro-p group. 
In fact. Loo — U">o Ln, where L„ is the p-Hilbert class field of F„ for n > 0. 
Now Loo/F is Galois and F = Gal(Foo/F) acts by inner automorphisms on 
the normal subgroup X of Gal(Loo/F). Thus, X is a Zp-module and F acts 
on X continuously and Zp-linearly. It is natural to regard X as a module 
over the group ring Zp [F] , but even better over the completed group ring 

A - Zp[[F]] = LimZp[Gal(F„/F)], 

where the inverse limit is defined by the ring homomorphisms induced by 
the restriction maps Gal(F,„/F) Gal(F„/F) for m > n > 0. The ring A 
is sometimes called the "Iwasawa algebra" and has the advantage of being a 
complete local ring. More precisely, A = Zp[[T]], where T is identified with 
7 — 1 G A. Here 7 € F is chosen so that 7] is nontrivial, and 1 is the identity 
element of F (and of the ring A). Then 7 generates a dense subgroup of F 
and the action of F = 7 — 1 on X is "topologically nilpotent." This allows 
one to consider X as a yl-module. 

Iwasawa proves that X is a finitely generated, torsion yl-module. There 
is a structure theorem for such yl-modules which states that there exists a 
"pseudo- isomorphism" 
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where each fi{T) is an irreducible element of A and the ai's are positive 
integers. (We say that two finitely generated, torsion yl-modules X and Y 
are pseudo-isomorphic when there exists a yl-homomorphism from X to Y 
with finite kernel and cokernel. We then write X Y.) It is natural to try 
to recover Gal(L„/F„) from X = Gal(Loo/^oo)- 

Suppose that F has only one prime lying over p and that this prime is 
totally ramified in F^/F. (Totally ramified in Fi/F suffices for this.) Then 
one can indeed recover Gal(-L„/F„) from the yl-module X. We have 

Gal(L„/F„) ^ X/(7f" - l)X. 

The isomorphism is induced from the restriction map X Gal(I/„/i^„). Here 
is a brief sketch of the proof: Gal(Foo/-Fn) is topologically generated by 7^ ; 
one verifies that (7'' — 1)X is the commutator subgroup of Gal(Loo/^n); 
and one proves that the maximal abelian extension of Fn contained in Lqo 
is precisely F^oLn- (This last step is where one uses the fact that there is 
only one prime of Fn lying over p.) Then one notices that Gal(iy,i/^'„) = 
Gal{Fcx,Ln/ Foe)- If F has more than one prime over p, one can still recover 
Gal(L„/F„) for n 0, somehow taking into account the inertia subgroups 
of Gdl{Loc/ Fn) for primes over p. (Primes not lying over p are unramified.) 
One can find more details about the proof in [Wa2]. 

The invariants A and fi can be obtained from X in the following way. 

00 

Let f{T) be a nonzero element of A: f{T) = Yl CiT^, where Cj e 2p for 

i > 0. Let /x(/) > be defined by: p''(/)|/(T), but \ f{T) in A. Thus, 

/(T)p~^(-'') is in A and has at least one coefficient in . Define A(/) > 
to be the smallest i such that Cip-^'^f^ e Z^ . (Thus, /(T) e A'^ if and only 

if A(/) = = 0.) Let /(T) = n h{TY^ ■ The ideal (/(T)) of A is called 

i=l 

the "characteristic ideal" of X. Then it turns out that the A and /i occurring 
in Iwasawa's theorem are given by A = A(/), ji = /x(/). For each i, there are 
two possibilities: either fi{T) is an associate of p, in which case ^j^{fi) — 1, 
A(/i) = 0, and A/{fi{T)'^') is an infinite group of exponent p"', or fi{T) is 
an associate of a monic polynomial of degree A(/j), irreducible over Q^, and 
"distinguished" (which means that the nonleading coefficients are in pZp), 
in which case /i(/i) = and A/{fi{T)°-') is isomorphic to ^p*--^'-*"' as a group. 
Then, A = SaiX{fi), /i = Sai^{fi). The invariant A can be described more 
simply as A = rank2p(X/X2jj-tors), where X^^-tors is the torsion subgroup 
of X. Equivalently, A = dimQ^(X (g)^^ Q^). 

The invariants A = X{Foo/F) and fj, — ^{Foo/F) are difficult to study. 
Iwasawa found examples of Zp-extensions Foo/F where IJ,{F^/F) > 0. In 
his examples there are infinitely many primes of F which decompose com- 
pletely in Fqo/F. In these lectures, we will concentrate on the "cyclotomic 
Zp-extension" of F which is defined as the unique subfield F^o of F{iip^ ) 
with r = Ga\{F^/F) = Zp. Here /Xpoo denotes the p-power roots of unity. It 
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is easy to show that all nonarchimedean primes of F are finitely decomposed 
in Foo/F. More precisely, if v is any such prime of F, then the corresponding 
decomposition subgroup r{v) of F is of finite index, li v \ p, then the inertia 
subgroup is trivial, i.e., v is unramified. (This is true for any 2p-extension.) If 
v\p, then the corresponding inertia subgroup of F is of finite index. Iwasawa 
has conjectured that iJ.{Fao/F) = if F^/F is the cyclotomic 2p-extension. 
In the case where F is an abelian extension of Q, this has been proved by 
Ferrero and Washington. (See [FeWa] or [Wa2].) 

On the other hand, X{F^/F) can be positive. The simplest example is 
perhaps the following. Let F be an imaginary quadratic field. Then all 2p- 
extensions of F are contained in a field F such that Gal{F/F) ^ Z^. (Thus, 
there are infinitely many Zp-extensions of F.) Letting F^c/F still be the 
cyclotomic Zp-cxtension, one can verify that F/F^c is unramified if p is a 
prime that splits completely in i^/Q. Thus in this case, Foo C F C Loo 
and hence X = Gal(Loo/-F'oo) has a quotient Gal(F/Foo) = Zp. Therefore, 
MFoc/F) > 1 if p splits in F/(Q. Notice that, since F/F is abelian, the action 
of T = 7 - 1 on Gal(F/Foo) is trivial. Thus, X/TX is infinite. Now if one 
considers the yl-module Y = A/ {fi{T)'^'), where fi{T) is irreducible in A, then 
Y/TY is infinite if and only if fi{T) is an associate of T. Therefore, if F is an 
imaginary quadratic field in which p splits and if Fqo is the cyclotomic Zp- 
extension of F, then T|/(T), where /(T) is a generator of the characteristic 
ideal of X. One can prove that f .f{T). (This is an interesting exercise. It 
is easy to show that X/TX has Zp-rank 1. One must then show that X/T'^X 
also has Zp-rank 1. See [Grl] for a more general "semi-simplicity" result.) 

In contrast, suppose that F is again imaginary quadratic, but that p is 
inert in F/Q. Then F has one prime over p, which is totally ramified in the 
cyclotomic Zp-extension F^o/F. As we sketched earlier, it then turns out that 
X/TX is finite and isomorphic to the p-primary subgroup of the ideal class 
group of F. In particular, it follows that if p does not divide the class number 
of F, then X = TX. Nakayama's Lemma for yl- modules then implies that 
X = and hence \{F^/F) = for any such prime p. In general, for arbitrary 
n > 0, the restriction map X Gal(L„/F„) induces an isomorphism 



where 9,, = 7P" - 1 = (1 + T)p" - 1. We can think of X/OnX as Xr„ , the 
maximal quotient of X on which F„ acts trivially. Here F„ = Gal(Foo/F„). 
It is interesting to consider the duals of these groups. Let 



Then we can state that Sn = S!^ , where the isomorphism is simply the 
dual of the map X/-^ Gal(L„/F„). Here denotes the subgroup of 5oo 
consisting of elements fixed by F„. The map Sn will be an isomorphism 

if F is any number field with just one prime lying over p, totally ramified in 



x/e^x^ 



Gal(L„/F„) 



Hom(Gal(L„/F„),Qp/Zp), 



Soo = Homcont(-'^, Qp/Zp). 
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Foo/F. But returning to the case where F is imaginary quadratic and p spUts 
in -F/Q, we have that is infinite. (It contains Honi(Gal(i^/Foo), Qp/2p) 
which is isomorphic to Q^/Zp.) Thus, is always infinite, but Sn is finite, 
for all n > 0. The groups 5„ and Soo are examples of "Selmer groups," by 
which we mean that they are subgroup of Galois cohomology groups defined 
by imposing local restrictions. In fact, Sn is the group of cohomology classes 
in H^{Gf„,Q,p/^p) which are unramified at all primes of Fni and is 
the similarly defined subgroup of H^(Gf^,^p/'^p)- Here, for any field M, 
wc let Gm denote the absolute Galois group of Af. Also, the action of the 
Galois groups on Qp/2p is taken to be trivial. As is customary, we will 
denote the Galois cohomology group H^{Gm, *) by H^{M, *). We will denote 
H'{Gal{K/M),*) by H\K/M, *) for any Galois extension K/M. Wc always 
require cocycles to be continuous. Usually, the group indicated by * will be 
a p-primary group which is given the discrete topology. We will also always 
understand IIom( , ) to refer to the set of continuous homomorphisms. 

Now we come to Selmer groups for elliptic curves. Suppose that E is an 
elliptic curve defined over F. We will later recall the definition of the classical 
Selmer group Sc\e{M) for E over M , where M is any algebraic extension of 
F. Right now, we will just mention the exact sequence 

^ E{M) (Q/Z) ^ Sel£;(M) ^ mE(M) ^ 0, 

where E{M) denotes the group of M-rational points on E and IIIb(M) 

denotes the Shafarevich-Tate group for E over M . We denote the p-primary 
subgroups of Selis(M), m.E{M) by Selis(M)j„ mE{M)p. Thep-primary sub- 
group of the first term above is E{M) (g) (Q^/Zp). Also, Se\E{M)p is a sub- 
group of H^{M, E[p°°]), where E[p°^] is the p-primary subgroup of -E(Q). As 
a group, E\p°°] = (Q^/Zp)^, but the action of Gf is quite nontrivial. Let 
Foo/F denote the cyclotomic Zp-extension. We will now state a number of 
theorems and conjectiircs, which constitute part of what wc call "Iwasawa 
Theory for E." Some of the theorems will be proved in these lectures. We 
always assume that F^o is the cyclotomic Zp-extension of F. 

Theorem 1.2 (Mazur's Control Theorem). Assume that E has good, or- 
dinary reduction at all primes of F lying over p. Then the natural maps 

SelB(F„)p Se\E{Foo)^- 

have finite kernel and cokernel, of bounded order as n varies. 

The natural maps referred to arc those induced by the restriction maps 
H'^{Fn,E[p'^]) H'^{Foo,E[p°°]). One should compare this resuh with the 
remarks made above concerning Sn and S^ . We will discuss below the cases 
where E has either multiplicative or supersingular reduction at some primes 
of F lying over p. But first we state an important conjecture of Mazur. 



Iwasawa Theory for Elliptic Curves 



5 



Conjecture 1.3. Assume that E has good, ordinary reduction at all primes 
of F lying over p. Then Sel£;(Foo)p is A-cotorsion. 

Here F = Gal{Fac/F) acts naturally on the group H''-{Fao, E\p°°]), which 
is a torsion Zp-module, every clement of which is killed by T" for some n. 
Thus, H^{Fao,E\p'^]) is a yl-module. Sel£;(Foo)p is invariant under the action 
of F and is thus a yl-submodule. We say that SelB(Foo)p is ^-cotorsion if 

XEiF^) = Hom(Sel£(F„c)p, 

is yl-torsion. Here Sel£;(-Foo)p is ap-primary group with the discrete topology. 
Its Pontryagin dual Xe{F^) is an abelian pro-p group, which we regard as 
a yl-modulc. It is not hard to prove that Xe{Foo) is finitely generated as a 
yl-module (and so, Se\E{Foo)p is a "cofinitely generated" yl-module). In the 
case where E has good, ordinary reduction at all primes of F over p, one 
can use theorem 1.2. For Xe{F) = Hom(SelE(F)p, Q^/Zp) is known to be 
finitely generated over Zp. (In fact, the weak Mordell-Weil theorem is proved 
by showing that Xe{F)/pXe{F) is finite.) Write X = X£;(foo) for brevity. 
Then, by theorem 1.2, X/TX is finitely generated over Zp. Hence, X/mX is 
finite, where m = {p, T) is the maximal ideal of A. By a version of Nakayama's 
Lemma (valid for profinite yl- modules X), it follows that Xe{F^) is indeed 
finitely generated as a /1-moduIe. (This can actually be proved for any prime 
p, with no restriction on the reduction type of E.) Here is one important case 
where the above conjecture can be verified. 

Theorem 1.4. Assume that E has good, ordinary reduction at all primes 
of F lying over p. Assume also that Sel£;(F)j, is finite. Then ^e\E{Foa)p is 
A-cotorsion. 

This theorem is an immediate corollary of theorem 1.2, using the following 
exercise: if X is a yl-module such that X/TX is finite, then X is a torsion 
yl-module. The hypothesis on Se\E{F)p is equivalent to assuming that both 
the Mordell-Weil group E{F) and the p-Shafarevich-Tate group UIe(F)p are 
finite. A much deeper case where conjecture 1.3 is known is the following. 
The special case where E has complex multiplication had previously been 
settled by Rubin [Rul]. 

Theorem 1.5 (Kato-RohrHch). Assume that E is defined over Q and is 
modular. Assume also that E has good, ordinary reduction or multiplicative 
reduction at p and that F/Q is abelian. Then Se\E{Foo)p is A-cotorsion. 

The case where E has multiplicative reduction at a prime f of lying over 
p is somewhat analogous to the case where E has good, ordinary reduction 
at V. In both cases, the Gi?^ -representation space Vp{E) — Tp{E) (E) Qp has 
an unramified 1-dimensional quotient. (Here Tp{E) is the Tate-modulc for E; 
Vp{E) is a 2-dimcnsional Qp-vector space on which the local Galois group Gf^ 
acts, where Fy is the t;-adic completion of F.) It seems reasonable to believe 



6 Ralph Greenberg 



that the analogue of Theorem 1.2 should hold. This was first suggested by 
Manin [Man] for the case F = Q. 

Conjecture 1.6. Assume that E has good, ordinary reduction or multiplica- 
tive reduction at all primes of F lying over p. Then the natural maps 

SelB(F„)p ^ Se\E{Foo)^" 

have finite kernel and cokemel, of hounded order as n varies. 

For = Q, this is a theorem. In this case, Manin showed that it would 
suffice to prove that logp(q'E) ^ 0, where denotes the Tate period for 

E, assuming that E has miiltiplicativc reduction at p. But a recent theorem 
of Barre-Siricix, Diaz, Gramain, and Philibert [B-D-G-P] shows that qs is 
transcendental when the j-invariant Je is algebraic. Since je € Q, it follows 
that qEP^°'"^^'^'^^ is not a root of unity and so logp(g£;) ^ 0. For arbitrary 

F, one would need to prove that logp(A^i7^/Q {'i^s)) ^ primes v 
of F lying over p where E has multiplicative reduction. Here Fy is the v- 
adic completion of F, the corresponding Tate period. This nonvanishing 
statement seems intractable at present. 

If E has supersingular reduction at some prime v of F, then the "control 
theorem" undoubtedly fails. In fact, Se\E{Foo)p will not be yl-cotorsion. More 
precisely, let 

r{E,F) = Y,[Fv--%], 

pss 

where the sum varies over the primes v oi F where E has potentially super- 
singular reduction. Then one can prove the following result. 

Theorem 1.7. With the above notation, we have 

corankA(SelB(i^oo)p) > r{E,F). 

This result is due to P. Schneider. He conjectures that equality should hold 
here. (See [Sch2].) This would include for example a more general version 
of conjecture 1.3, where one assumes just that E has potentially ordinary 
or potentially multiplicative reduction at all primes of F lying over p. As a 
consequence of theorem 1.7, one finds that 

corankz^(SelB(Foo)^-) > r{E,F)p'' 

for n > 0. This follows from the fact that yl/6'„yl ^ . (The ring A/O^A is 
just 2p[Gal(_F„/i^)].) One uses the fact that there is a pseudo-isomorphism 
from XE{Fao) to A'^ Y, where r = rank/i(X£;(Foo)), which is the yl-corank 
of Self;(Foo)p, and Y is the /l-torsion submodule of Xe{Foo). However, it 
is reasonable to make the following conjecture. We continue to assume that 
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Fao/F is the cyclotomic Zp-extension, but make no assumptions on the re- 
duction type for E at primes lying over p. The conjecture below follows from 
results of Kato and Rohrlich when F is abelian over Q and E is defined over 
Q and modular. 

Conjecture 1.8. The ^p-corank o/SelE(F„)p is bounded as n varies. 

If this is so, then the map Scl£;(_F'„)p Sc\e{Foc)^" must have infinite cok- 
ernel when n is sufficiently large, provided that we assume that E has po- 
tentially supersingular reduction at v for at least one prime v oi F lying 
over p. Of course, assuming that the p-Shafarcvich-Tatc group is finite, the 
Zp-corank of SelE{Fn)p is just the rank of the Mordell-Weil group E{Fn). 
If one assumes that E{Fn) does indeed have bounded rank as n — > oo then 
one can deduce the following nice consequence: E{Foo) is finitely generaied. 
Hence, for some n > 0, E[F^) = E[Fn). This is proved in Mazur's article 
[Mazl]. The crucial step is to show that -B(-Foo)tors is finite. We refer the 
reader to Mazur (proposition 6.12) for a detailed proof of this helpful fact. 
(We will make use of it later. See also [Im] or [Ri].) Using this, one then 
argues as follows. Let t = |-E(F<x>) torsi- Choose m so that Ta,nk{E{Fm)) is 
maximal. Then, for any P G E{Foc), we have kP <E E{Fm) for some k>l. 
Then g{kP) = kP for all g € G&\{F^/Fm). That is, g{P) - P is in £;(Foo)tors 
and hence t{g{P) - P) = Oe- This means that tP e E{Fm)- Therefore, 
tE{Foc) C E{Fm), from which it follows that E{Foc) is finitely generated. 

On the other hand, let us assume that E has good, ordinary reduction 
or multiplicative reduction at all primes v of F lying over p. Assume also 
that Sel£;(foo)p is /1-cotorsion, as is conjectured. Then one can prove conjec- 
ture 1.8 very easily. Let denote the A-invariant of the torsion yl-module 
Xe{Foo)- That is, Xe = rankzp(X£(Foo)) = corankzp(SelB(Foo)p)- We get 
the following result. 

Theorem 1.9. Under the above assumptions, one has 

corank2p(Sel£;(F„)p) < A^. 

In particular, the rank of the Mordell-Weil group E[Fn) is bounded above by 
Xe- 

This result follows from the fact that the maps Sel£;(F„)p Se\E{Foo)p 
have finite kernel. This turns out to be quite easy to prove, as we will see 
in section 3. Also, the rank of E{Fn) is the Zp-corank of E{Fn) ® (Qp/Zp), 
which is of course bounded above by corank^^ (Scl£(P„)p). (Equality holds 
if IIl£;(F„)p is finite.) Let X'^'^ denote the maximum of rank(i<^(P„)) as n 
varies, which is just rank(i?(Poo))- Let A™ = A^ — X^~^ . We let jiE denote 
the /i- invariant of the yl-module Xe{Foo)- If necessary to avoid confusion, 
we might write A^; = Xe{Foo/F), He = IJ.e{Foo/F), etc. Then we have the 
following analogue of Iwasawa's theorem. 
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Theorem 1.10. Assume that E has good, ordinary reduction at all primes of 
F lying over p. Assume that ScIe{F.x)p is A-cotorsion and that IIl£;(_F'„)p is 
finite for all n>0. Then there exist A, /it, and v such that |IIl£;(F„)p| = p^" , 
where Cn = Xn + fip"^ + v for all n » 0. Here A = A™ and [i — \ie- 

As later examples will show, each of the invariants A^'^, A™, and he 
can be positive. Mazur first pointed out the possibility that \xe could be 
positive, giving the following example. Let E = Xo(ll), p = 5, F = Q, and 
Foa = Qoo — the cyclotomic 25-extension of Q. Then [ie = 1- (In fact, 
{fE{T)) — {p).) There are three elliptic curves/(Q of conductor 11, all isoge- 
nous. In addition to E, one of these elliptic curves has /x = 2, another has 
= 0. In general, suppose that cj) : Ei ^ E2 is an F-isogeny, where Ei, E2 
are defined over F. Let : Se\Ei{Foo)p — * SelE2(Foc)p denote the induced 
/1-modulo homomorphism. It is not hard to show that the kernel and cokernel 
of have finite exponent, dividing the exponent of ker((/)). Thus, SelEi{Foo)p 
and Sel_B2 {Foo)p have the same Tl-corank. If they are Tl-cotorsion, then the A- 
invariants are the same. The characteristic ideals of XEi{Frx) and Xe2{Foc) 
differ only by multiplication by a power of p. li F = Q, then it seems reason- 
able to make the following c;onjecture. For arbitrary F, the situation seems 
more complicated. We had believed that this conjecture should continue to 
be valid, but counterexamples have recently been found by Michael Drinen. 

Conjecture 1.11. Let E be an elliptic curve defined over Q. Assume that 
Sel£;(Q(^)p is A-cotorsion. Then there exists a ^-isogenous elliptic curve 
E' such that he' = 0. In particular, if E\p] is irreducible as a 
representation of G<q, then fiE = 0- 

Here E[p] = ker(i?((Q) ^ F(Q)). P. Schneider has given a simple formula for 
the effect of an isogeny on the /i-invariant of Sc\e{Foo)p for arbitrary F and 
for odd p. (See [Sch3] or [Pe2].) Thus, the above conjecture effectively predicts 
the value of /kb for F = Q. 

Suppose that Sel£;(Foo)p is yl-cotorsion. Let fsiT) be a generator of the 
characteristic ideal of XE{Fao)- Then Xe = A(/e) and he = m(/b)- We have 

t 

XE{F^)^l[A/{f,{Tr) 

where the /j(T)'s are irreducible elements of A, and the a^'s are positive. If 

{fi{T)) = (p), then it is possible for > 1. However, in contrast, it seems 
reasonable to make the following "semi-simplicity" conjecture. 

Conjecture 1.12. Let E be an elliptic curve defined over F. Assume that 
Sel£;(Foo)p is A-cotorsion. The action of F = Gal(F(x>/F) on X£;(Foo)(8'#j,Qp 
is completely reducible. That is, ai = 1 for all i's such that fi{T) is not an 
associate of p. 
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Assume that E has good, ordinary reduction at all primes of F lying over 
p. Theorem 1.2 then holds. In particular, corankxp{SelE{F)p) , which is equal 
to va.nk:^^{XE{Fao)/TXE{F^)), would equal the power of T dividing fE{T), 
assuming the above conjecture. Also, the value of A^"^ would be equal to 
the number of roots of fE{T) of the form C ~ 1: where C is a p-powcr root 
of unity, if we assume in addition the finiteness of IIIb (F„)p for all n. For 
conjecture 1.12 would imply that this number is equal to the 2p-rank of 
XE{F^)/9nXE{Fo^) for n > 0. 

In section 4 we will introduce some theorems due to B. Perrin-Riou and 
to P. Schneider which give a precise relationship between Sel_E(^')p and the 
behavior of fE{T) at T = 0. These theorems are important because they 
allow one to study the Birch and Swinnerton-Dyer conjecture by using the 
so-called "Main Conjecture" which states that one can choose the generator 
/^(T) so that it satisfies a certain interpolation property. We will give the 
statement of this conjecture for F = (Q, which was formulated by B. Mazur 
in the early 1970s (in the same paper [Mazl] where he proves theorem 1.2 
and also in [M-SwD]). 

Conjecture 1.13. Assume that E is an elliptic curve defined over Q which 
has good, ordinary reduction at p. Then the characteristic ideal of Xe{^^) 

has a generator fs (T) with the properties: 

(i) fsiO) = (1 - ppp-^fL{E/n, l)/ilE 

(ii) fE{(p{T)) = {l3pYL{E/(^,(f),l)/QET{(t>) if (p is a finite order character of 
r = Gal(Q^/Q) of conductor > 1. 

We must explain the notation. First of all, fix embeddings of Q into C and 
into Qp. I/(i?/Q, s) denotes the Hassc-Weil L-series for E over Q. He denotes 
the real period for E, so that L(F/(Q, l)/]?^; is conjccturally in Q. (If E is 
modular, then L(F/(Q,s) has an analytic continuation to the complex plane, 
and, in fact, i(S/Q, l)/!?^; e Q.) Let E denote the reduction of E at p. 
The Euler factor for p in L{E/(Sl, s) is ((1 — app~^){\ — (3pp~''))~^, where ap, 
f3p e Q, ap(3p = p, ap + f3p = 1 +p — \E{Wp) \ . Choose ap to be the p-adic unit 
under the fixed embedding Q — > Q^. Thus, /3pP~^ = a"^. For every complex- 
valued, finite order Dirichlet character (f>, L(E/<S^,(t>,s) denotes the twisted 
Hasse-Weil L-series. In the above interpolation property, </) is a Dirichlet 
character whose associated Artin character factors through P. Using the fixed 
embeddings chosen above, we can consider as a continuous homomorphism 
(f) : r ^ Qp of finite order, i.e., 1/1(7) = where is a p-power root of 
unity in Qp. Then (t){T) = 0(7 — 1) = ^ — 1, which is in the maximal ideal 
of Zp. Hence fE{4>{T)) — fsiC ^ 1) converges in Qp. The complex number 
L{E/^, (p, \)/ Qe should be algebraic. In (ii), we regard it as an element of 
Qp, as well as the Gaussian sum T{(j}). For p > 2, conjecture 1.13 has been 
proven by Rubin when E has complex multiplication. (Sec [Ru2].) If is a 
modular elliptic curve with good, ordinary reduction at p, then the existence 
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of some power series satisfying the stated interpolation property (i) and (m) 
was proven by Mazur and Swinnerton-Dyer in the early 1970s. We will denote 
it by /|"^'(r). (See [M-SwD] or [M-T-T].) Conjecturally, this power series 
should be in A. This is proven in [St] if E[p] is irreducible as a Gq-module. 
In general, it is only known to be A (g)^^ Q^. That is, p^f'jf'^^iT) G A for 
some t > 0. Kato then proves that the characteristic ideal at least contains 
pmjanaij-j.-) f^j. g^j^g m > 0. Rohrlich proves that i(£;/Q, 0, 1) ^ for all 
but finitely many characters (j> of F, which is equivalent to the statement 
yanai^ji^ as an element of A igj^p Qp- One can use Kato's theorem to 
prove conjecture 1.13 when E admits a cyclic Q-isogeny of degree p, where 
p is odd and the kernel of the isogeny satisfies a certain condition (namely, 
the hypotheses in proposition 5.10 in these notes). This will be discussed in 
[GrVa]. 

Continuing to assume that -E/Q is modular and that p is a prime where 
E has good, ordinary reduction, the so-called p-adic L-function Lp{E/Q„ s) 
can be defined in terms of /™'*'(T). We first define a canonical character 

K : r ^ 1 + 2pZp 

induced by the cyclotomic character x ■ Gal(Q(y^poo)/Q) composed 
with the projection map to the second factor in the canonical decomposition 
= X (1 +p'^p) for odd p, or = {±1} x (1 + 4^2) for p = 2. 

Thus, K is an isomorphism. For s G Zp, define Lp{E/(£l,s) by 

Lp(i?/Q,s) = /|;"^'(«(7r'-l)- 

The power series converges since K{jy^^ — 1 G p^p- (Note: Let t G Zp. 
The continuous group homomorphism k* : _r ^ 1 + pZp can be extended 
uniquely to a continuous Zp-lincar ring homomorphism : A ^ Zp. We 
have K*(r) = k(7)* - 1 and K*(.f{T)) = /(«;(7)' - 1) for any /(T) G A. 
Thus, Lp{E/q, s) is K"^i(/|."^'(r)).) The functional equations for the Hasse- 
Wcil L-serics give a simple relation between the values L{E/(S^,(j),l) and 
L{E/€l,(f>^^,l) occmring in the interpolation property for /|;"^'(T). Since 
/|;"^'(T) is determined by its interpolation property, one can deduce a simple 
relation between and /|"^'((1 + T)-i - 1). Omitting the details, one 

obtains a functional equation for _Lp(i?/(Q, s): 

Lp{E/(^,2- .3) = WE{NEr-'LpiE/(^,s) 

for all s G Zp. Here we is the sign which occurs in the functional equation 
for the Hasse-Weil L-series L{E/<^,s), Ne is the conductor of E, and (Ne) 
is the projection of Ne to 1 + 2pZp as above. 

The final theorem we will state is motivated by conjecture 1.13 and the 
above functional equation for the p-adic L-function ip(_B/(Q,s). .The func- 
tional equation is in fact equivalent to the relation between /|f '(T) and 
/|"'''((l+T)-i-l) mentioned above. In particular, /|;"^'(r')//|"^i(T) should 
be in A^ , where T'' = (l-|-T)~^ — 1. The analogue of this statement is true 
for fsiT). More generally (for any F), we have: 
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Theorem 1.14. Assume that E is an elliptic curve defined over F with good, 
ordinary reduction or multiplicative reduction at all primes of F lying over 
p. Assume that Scl£;(i^oo)p is A-cotorsion. Then the characteristic ideal of 
Xe{Foo) is fixed by the involution i of A induced by ^(7) = 7^^ for all 7 e -T. 

A proof of this result can be found in [Gr2] using the Duahty Theorems of 
Poitou and Tate. There it is dealt with in a much more general context — that 
of Selmer groups attached to "ordinary" p-adic representations. 

We will prove theorem 1.2 completely in the following two sections. Our 
approach is quite different than the approach in Mazur's article and in Manin's 
more elementary expository article. We first prove that, when E has good, or- 
dinary or multiplicative reduction at primes over p, the p-primary subgroups 
of Sel_E(i^„) and of Sel£;(Foo) have a very simple and elegant description. This 
is the main content of section 2. Once we have this, it is quite straightforward 
to prove theorem 1.2 and also a conditional result concerning conjecture 1.6 
which we do in section 3. In this approach we avoid completely the need to 
study the norm map for formal groups over local fields, which is crucial in 
the approach in [Mazl] and [Man]. We also can use our description of the 
p-Selmer group to determine the p-adic valuation of /£;(0), under the assump- 
tion that E has good, ordinary reduction at primes over p and that Sel£;(F)p 
is finite. Section 4 is devoted to this comparatively easy special case of results 
of B. Perrin-Riou and P. Schneider found in [Pel], [Schl]. Their results give 
an expression involving a p-adic height determinant for the p-adic valuation 
of {fE{T)/T'^)\T=o, where r = raBk{E{F)), under suitable hypotheses. Fi- 
nally, in section 5, (which is by far the longest section of this article) we will 
discuss a variety of examples to illustrate the results of sections 3 and 4 and 
also how our description of the p-Sclmcr group can be used for calculation. 
We also include in section 5 a number of remarks taken from [Mazl] (some 
of which are explained quite differently here) as well as various results which 
don't seem to be in the existing literature. Throughout this arti('lc\ we have 
tried to include p = 2 in all of the main results. Perhaps surprisingly, this 
turns out to not be so complicated. 

We will have very little to say about the case where E has supersingular 
reduction at some primes over p. In recent years, this has become a very 
lively aspect of Iwasawa theory. We just refer the reader to [Pe4] as an intro- 
duction. In [Pe4], one finds the following concrete application of the theory 
described there: Suppose that E/(^, has supersingular reduction at p and that 
SelB(Q)p is finite. Then Self;(Q„)p has bounded 'Z.p-corank as n varies. This 
is, of course, a special case of conjecture 1.8. In the case where E has good, 
ordinary reduction over p, theorem 1.4 gives the same conclusion. Another 
topic that we will not pursue is the behavior of the p-Selmer group in other 
Zp-extensions — for example, the anti-cyclotomic 2p-extension of an imagi- 
nary quadratic field. The analogues of conjectures 1.3 and 1.8 can in fact be 
false. We refer the reader to [Be], [BeDal, 2], and [Maz4] for a discussion 
of this topic. We also will not pursue the analytic side of Iwasawa theory — 
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questions involving the properties of p-adic L- functions and the p-adic version 
of a Birch and Swinnerton-Dyer conjecture. For this, one can learn something 
from the articles [M-SwD], [B-G-S], and [M-T-T]. Many of the ideas we dis- 
cuss here can be extended to a far more general context. For an introduction 
to this, wc refer the reader to [CoSc] and to [Gr2,3]. 

The author is grateful to the Fondazione Centro Internazionale Matem- 
atico Estivo and to Carlo Viola for the invitation to give lectures in Cetraro. 
This article is an extensively expanded version of those lectures, based con- 
siderably on research which was partially supported by the National Science 
Foundation. The author is also grateful for the support and hospitality of the 
American Institute of Mathematics during the Winter of 1998, when many 
of the results and examples described in section 5 were obtained. We want to 
thank Karl Rubin for many valuable discussions and for his help in the details 
of several examples, Ted McCabe for carrying out numerous calculations of 
p-adic L-functions which allowed us to verify the main conjecture in many 
cases, and Ken Kramer for explaining his results about elliptic curves with 
2-power isogenics. We are also grateful to John Coates for many helpful re- 
marks and to Y. Hachimori, K. Matsuno and T. Ochiai for finding a number 
of mistakes in the text. 

2. Kummer Theory for E. 

Let E be an elliptic curve defined over a number field F. If M is any al- 
gebraic extension of F, Kummer theory for E over M leads quite naturally 
to the classical definition of the Selmer group Sel£;(M). The main objective 
of this section is to give a simplified description of its p-primary subgroup 
ScIe{M)p under the hypothesis that E has either good, ordinary reduction 
or multiplicative reduction at all primes of F lying over p. We will assume 
that M is either a finite extension or a 2p-extension of F. 

Kummer theory for the multiplicative group is quite familiar. Re- 
garding M as a subfield of F, a fixed algebraic closure of F (or Q), we can 
define the Kummer homomorphism 

fc:MX0(Q/Z)^ifi(M,Ft>^„,J 

as follows. Let a e M^. Let a = o (m/n -|- 2) e (g) (Q/Z). Choose 
b S F^ such that &" = a™, using the fact that F^ is a divisible group. Then 
one defines k{a) to be the class of the 1-cocycle (pa given by </>«(<?) = g{b)/b 
for all 5 e Gm = Gal(F/M). The values of cj) a are in F^^^.^ , the group of roots 
of unity in F. The Kummer homomorphism is an isomorphism. Injectivity is 
easy to verify. Surjectivity is a consequence of Hilbert's Theorem 90, which 
asserts that H^{M,F'') = 0. 

Since E{F) is divisible, one can imitate the above definition, obtaining 
an exact sequence 

^ E{M) ® (Q/Z)-^ifi(M,£;(F)tors) ^ H\M,E(F)) ^ 0. 
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If a = a(8)(m/n + 2) e E{M)® {<Il/ '2.), then k{a) is the class of the 1-cocycle 
(j)a given by <j)a{g) = g{h) — b for all g G Gm - Here 6 G E(F) satisfies nb = ma 
on E{F). However, in general, H^{M, E{F)) is nonzero. Wo will fix a prime 
p and concentrate on the p-primary subgroups of the above groups. We let 
K = Km denote the corresponding Kummer homomorphism: 

K : EiM) ® (Qp/Zp) ^ H\M, E[p^]). 

If r] is any prime of M, we define M^, to be the union of the ?7-adic completions 
of all finite extensions of F contained in M. Thus, if rj lies over the prime v of 
F, then M,; is an algebraic extension of Fy. By fixing an embedding F Fy 
extending the embedding M M-q, one can identify Gm^ with a subgroup 
of Gm, which of course is just the decomposition subgroup for some prime 
of F lying over jj. We will let denote the Kummer homomorphism for E 
over M^: 

Kn : E{Mn) ® (Qj,/2p) ^ H\Mr„En. 

This is defined exactly as above. Now we can give the classical definition of 
the p-primary subgroup of the Selmer group for E over M. 

SelE{M)p = kei{H\M,En ^ JJ ifi(M^, ^[p-])/Im(K^)) 

n 

where r] runs over all primes of M and the map is induced hy (j) ^ ((/)| „ )„ 
for any 1-cocycle (f). We will denote the class of a 1-cocycle (f) by [(/>]. Thus 
[<^] is in Selfi (M)p if and only if ['PIqj^ ] G Im(K,,) for all r/. Obviously, 

Im(K;) C SelE{M)p. The corresponding quotient SelE{M)p/lm{K,) is, by defi- 
nition, UIe{M)p. 

Faltings has proved that E is determined up to F-isogeny by the Ge- 
representation space Vp{E) = Tp{E) (g) Q^, where Tp{E) denotes the p-adic 
Tate module for E. More precisely, the GF-module £;[p°°] = Vp{E)/Tp{E) 
determines E up to an i^-isogeny of degree prime to p. Now Sel£;(M)p is not 
changed by such F-isogenies, and hence one might hope to define it in a way 
which involves only the Gi?-module E[p°°]. To do this, it suffices to give such 
a description of the subgroup Im(K^) of H^{M^,E\p'^]) for all primes rj of 
M. We will now proceed to do this under the assumption that E has good, 
ordinary or multiplicative reduction at all primes of F over p. 

Assume at first that M is a finite extension of F. Then rj\v for some 
prime v of F, and r}\l for some prime I of Q (possible I = oo). If Hs a finite 
prime, then we have a theorem of Lutz: E{Mrj) = ^j*'^'' "^'' x [/ as a group, 
where U = i?(M^)tors is finite. Now 2; (g) ((Qp/2p) = ii I p, whereas 
Zp (g) (Qp/2p) = Qp/2p. Also, U (g (Qp/2p) = 0. If / = oo, then ^ M or 
C. In this case, E{M,j) ^ T^^^^'-^^ x U, where T = lR/2 and \U\ < 2. Since T 
is divisible, we have T ig) (Q /2p) = 0. We then obtain the following result. 
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Proposition 2.1. Ifr]]p, i/ien Im(K^) = 0. Ifr]\p, then 

Im(«:,)-(Qp/Zp)[^-«3pl. 

The first assertion can also bo explained by using the fact that, for r] \ p, 
H^{Mn,E[p°°]) is a finite group. But E{Mn) (g) (Q^/Zp), and hence Ini(K^) 
are divisible groups. Even if Af^ is an infinite extension of F^, it is clear from 
the above that Im(K^) = if tj] p. 

Assume that E has good, ordinary reduction at v, where u is a prime of 
F lying over p. Then, considering as a subgroup of E{F„), wc have 

the reduction map £'[p°°] E\p°°], where E is the reduction of E modulo 
V. Define Cv by 

Cy = ker {e\p'^] ^ . 

Now E[p°°] = (Qp/Zp)2, E[p°°] Qp/Zp as groups. It is easy to sec that 
Cy = Qp/2p. (In fact, Cy = J^{m)\p°^], where is the formal group of height 
1 for E and rn is the maximal ideal of the integers of F^.) A characterization 
in terms of E[p°°] is that Cy is Gi?^ -invariant and E[p°°]/Cy is the maximal 
unramified quotient of E\p°°]. Let M be a finite extension of F. If 77 is a prime 
of M lying above v, then we can consider as a subfield of Fy containing 
Fy. (The identification will not matter.) We then have a natural map 

: H\Mr,,Cy) ^ H\M^,En. 

Here is a description of Im(K^). 

Proposition 2.2. Im(K;^) = Im(A^)div 

Proof. The idea is quite simple. We know that Iin(K,,) and Iin(A^) arc p- 
primary groups, that Im(K,,) is divisible, and has 2p-corank [Af^ ; Qp]. It 
suffices to prove two things: (i) Im(K^) C Im(A,,) and (ii) Im(A^) has 2p- 
corank equal to [M^ : Qp]. To prove (i), let c G Im(K^). We show that 
c e ker(ifi(M^,£;[p°°]) ^ i?i(M^, which coincides with Im(A^). 

Let fy denote the residue field of Fy, its algebraic closure the residue 
field of Fy. If 6 e E{Fy), wc let b e E{f^) denote its reduction. Let ^ be a 
cocycle representing c. Then ^(5) = g{b)—b for all g G Gm^ , where b G E{Fy). 
The 1-cocycle induced by — > is (j), given by (/)((/) = g{b) — b for 

all g € GMr, - But <{> represents a class c in _ff^(M^, which becomes 

trivial in H^{Mri,E{f^)), i.e. (p is a. 1-coboundary. Finally, the key point is 
that E{f^) is a torsion group, E[p°°] is its p-primary subgroup, and hence the 
map H^{M.r,,E[p°°]) H^{Mn,E(f^)) must be injective. Thus, c is trivial, 
and therefore c G Im(A,,). 

Now we calculate the Zp-corank of Im(A,,). We have the exact sequence 

i;[pOO]G„^ ^^[pOojGM^ ^ H\Mr„Cy)^H\Mn,E\p°°]). 
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If rrin denotes the residue field of M^, then £'[p°°]'^"'7 is just the p-primary 
subgroup of E{mr,), a finite group. Thus, ker(A^) is finite. The following 

lemma then suffices to prove (ii). li tp : Gp^ ^ 2^ is a continuous homomor- 
phism, we will let (Qp/Zp)(f/;) denote the group Q^/Zp together with the 
action of Gpy given by ijj- 

Lemma 2.3. H^{Mj^,{^p/'2.p){ip)) has ^p-corank equal to [M^ : Q^] + S, 
where 6 = 1 if tp\Q^ is either the trivial character or the cyclotomic char- 
acter of Gm^ and 6 = otherwise. 

Remark. Because of the importance of this lemma, wc will give a fairly self- 
contained proof using local class field theory and techniques of Iwasawa The- 
ory. But we then show how to obtain the same result as a simple application 
of the Duality theorems of Poitou and Tate. 

Proof. The case where tp is trivial follows from local class field theory. Then 
H'^iMr,, (Qp/Zp)(V')) = Hom(Gal(M°VA^r,), Qp/^p)- The well-known struc- 
ture of M^^ implies that Gal(M^VM^) = zj,^"^*^"' x Z x (M^^tors, where Z 
is the profinitc completion of Z. The lemma is clear in this case. If i/il 

is the cyclotomic cliaracter, then ((Qp/Zp)(V') = Gm^ -modules. Then 

H^{Mr,, Upoo) = (M^) (g) (Qp/Zp), which indeed has the stated Zp-corank. 

Now suppose we are not in one of the above two cases. For brevity, we 
will write M for M„. Let Moo be the extension of M cut out hy ^p\„ . Thus, 
G = Gal(M(x,/M) = Im(i/;|g,^). If ip has finite order, one can reduce to 

studying the action of G on Gal(M^^/Moo) since Moo would just be a finite 
extension of Qp. We will do something similar if ip has infinite order. Then, 
G = A X H, where A is finite and H = Zp. If p is odd, \A\ divides p - 1. If 
p = 2, \ A\ = 1 or 2. Let C = (Qp/Zp)('^). The inflation-restriction sequence 
gives 

^ H\G, C) H\M, C) H\M^, Cf^ H'^{G, C). 

Now let /i be a topological generator of H. Then H^{H, C) = C/{h-l)C = 
because, considering /i — 1 as an endomorphism of C, ker(/i, — 1) is finite and 
Im(ft, — 1) is divisible. Thus, H^{G,C) = if p is odd, and has order < 2 
if p = 2. On the other hand, H'^{H,C) = since H has p-cohomological 
dimension 1. Then H'^{G,C) = if p is odd, and again has order < 2 if 
p = 2. Thus, it is enough to study 

H\Moo,Cf = HomG(Gal(M^VMoo), C). 

Let X = Gal(Loo/Moo), where Loo is the maximal abclian pro-p extension 
of Moo- We will prove the rest of lemma 2.3 by studying the structure of X 
as a module for Zp[[zi x H]] = A[A], where A = ^p[[H]] ^ Zp[[T]], with 
T = h — 1. The results are due to Iwasawa. 
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For any n > 0, let i?„ = iJ^" . Let M„ = M^" . The commutator subgroup 
of Gal{Loo/Mn) is (h^ — 1)X and so, if L„ is the maximal abelian extension 
of M„ contained in Loo, then Gal(L„/M„) = 7J„ x {X/{h''" - l)X). But L„ 
is the maximal abelian pro-p extension of M„ and, by local class field theory, 

this Galois group is isomorphic to ^jf^" *^"'^^ x W„, where W„ denotes the 
group of p-power roots of unity contained in M„. Consequently, if we put 
t=[Mo: %] = \A\ ■ [M : %], we have 

x/{hp" - i)x ^ -n}f X W„. 

Now, the structure theory for /I- modules states that X/X/i-tors is isomorphic 
to a submodule of , with finite index, where r = rankyi(X). Also, we have 
AjihP'" - V)A = 2^ for n > 0. It follows that r = t. One can also see 
that Xyi-tors — Lim W„, where this inverse limit is defined by the norm maps 

^ ^^n f'^'' ™ — ^- If has boundcd order (i.e., if fipoa ^ Mqc), 
then Xyi-tors = 0. Thus, X C A*-. To get more precise information about the 
structure of X, choose n large enough so that —1 annihilates A*/X. We 
then have 

(/if" - 1)X C (/iP" - 1)A* CXCA\ 

We can see easily from this that A*/X is isomorphic to the torsion subgroup 
of X/{hP" - l)X. That is, A^X ^ W, where W = M^n ^ip^. On the other 
hand, if /Uj,oo C Mqo, then XA-tors — ^p(l)) the Tate module for fXp^c. In this 
case, X/XA-toTs is free and hence X = A* x 2p(l). 

In the preceding discussion, the yl-module A* is in fact canonical. It is the 
reflexive hull of X/XA-tors- Thus, the action of Z\ on X gives an action on 
yl*. Examining the above arguments more carefully, one finds that, for p odd, 
yl* is isomorphic to yl[zi][^^'''^pl. (One just studies the yl-modulc X'^ for each 
character (p oi A. Recall that \A\ divides p— 1 and hence each character (p has 
values in .) For p = 2, we can at least make such an identification up to a 
group of exponent 2. For the proof of lemma 2.3, it suffices to point out that 
B.omAxH{A[A],C) is isomorphic to Qp/2p and that Hom^xff(2p(l)i C*) is 
finite. (We are assuming now that C ^ fipoo as GM-modules.) This completes 
the proof of lemma 2.3 and consequently proposition 2.2, since one sees easily 
that 6 = when C = Cy B 

The above discussion of the /l[Z\]-module structure of X gives a more 
precise result concerning i?^(M^, (Qp/Zp)('0)). Assume that p is odd and 
that has infinite order. If the extension of cut out by the character ip 
of Gm^i contains /Upoc , then we see that 

H\M^,C) - (Qp/Zp)[^-«^.l X HomG„^(Zp(l),C), (1) 

where as above C = ((Qp/Zp)(^/'). The factor HomcM^ (^p(I)i C*) is just 
H°{Mn, C ® x~^)) where x denotes the cyclotomic character. Even if W is 
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finite, we can prove (1). For if go is a topological generator oi Ax H, then the 
torsion subgroup of X/ {go — tlj{gQ))X is isomorphic to the kernel of go — ip{go) 
acting on A^X ^ W. (It is seen to be ((go - '(/'(.go))^* n X)/{go - il}{go))X.) 
But this in turn is isomorphic to W/{go ~ tl}{go))W , whose dual is easily 
identified with Homc^^ (2p(l), (Qp/Zp)(V')). 

We have attempted to give a rather self-contained "Iwasawa-theoretic" 
approach to studying the above local Galois cohomology group. This suffices 
for the proof of proposition 2.2. But using results of Poitou and Tate is often 
easier and more effective. We will illustrate this. Let C = (Qp/2p) (■)/;). Let T 
denote its Tate module and V = T Qp. The Zp-corank of H^{Gm^, C) 
is just dimQp(i?-'^(M^, y)). (Cocyclcs arc required to be continuous. V has 
its Qp-vcctor space topology. Similarly, T has its natural topology and is 
compact.) Letting hi denote dim(jj^(7/'(M^, y)), then the Euler characteristic 
for V over is given by 

ho-hi+h2 = -[Mr, : %] dimoj^(y) 

for any Gm^ -representation space V. We have dimQ^(y) = 1 and so the 2p- 
corank of H^{Mn, (Qp/Zp)(i/')) is [M^ : Q^] + ho + /i2- Poitou- Tate Duahty 
implies that H^{M^, V) is dual to H^{M^, V*), where V* = Hom(y. %{!)). 
It is easy to see from this that 5 = ho + /i.2, proving lemma 2.3 again. 
The exact sequence 0— >T— >y— >C— >0 induces the exact sequence 

The image of a is the maximal divisible subgroup of H^{Gm^,C). The 
kernel of 7 is the torsion subgroup of H'^{Mr,,T). Of course, coker(a) = 
Im(/3) ^ ker(7). Poitou- Tate Duality implies that H^{M,j,T) is dual to 
iJ°(M^,Hom(T,/Xpoo)) = HomG^^(T,;Ltpoo). The action of Gm„ on T is by 
tp; the action on /Upoo is by %. Thus, HomcM^ {T, /Up~) can be identified with 
the dual of i/°(M^, (Qp/2j,)(x'^i'"^)). If ipl^^ = x|g„ ' *^en we find that 

H'^{Mr,,T) = Zp, Im(/3) = 0, and therefore H^{Mr„C) \s divisible. Other- 
wise, we find that H'^{Mjj,T) is finite and that 

H\Mr„C)/H\Mr„CU, ^ (Qp/Zp)(V'X- (2) 

which is a finite cyclic group, indeed isomorphic to Homcj^^ (2p(l), C). This 
argument works even for p = 2. 

We want to mention here one useful consequence of the above discussion. 
Again we let C — (Qp/2p)(i/'), where ip : Gp^ 2p is a continuous ho- 
momorphism, v is any prime of F lying over p. If 77 is a prime of F^c lying 
over V, then {Foo)rj is the cyclotomic Zp-extension of F„. By lemma 2.3, the 
Zp-corank of iJ^((F„)^, C) differs from [{Fn)rj : F^] by at most 1. Thus, if 
we let Fy = Gal{{Foo)ri/Fv), then it follows that as n ^ 00 

corank2^(iri((i?^)^,C)^"") =p"[j; : %]+0{l). 
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The structure theory of yl-modules then implies that H^{{Foo)rj, C) has corank 
equal to [Fy : Q^] as a Zp[[r„]]-module. Assume that is unramified and 
that the maximal unramified extension of Fy contains no p-th roots of unity. 
(If the ramification index e„ for v over p is < p — 2, then this will be true. 
If F = Q, this is true for all p > 3.) Then by (2) we see that H'^{Fy,C) 
is divisible. The Zp-corank of H^{Fy,C) is [F^ : Q^] + 5, where <5 = if 
is nontrivial, 5 = 1 if ^ is trivial. By the inflation-restriction sequence we 
see that H^{{F^\,CY- ^ (Qp/Zp)[^-i^pl. It follows that H^{{F^\,C) is 
Zp[[r„]]-cofree of corank [Fy : Q^], under the hypotheses that ip is unramified 
and By < p — 2. These remarks are a special case of results proved in [Gr2]. 

Now we return to the case where Cy = ker(iJ[p°°] — > jE\p°°]). The action 
of Gf„ on Cy is by a character tp, the action on is by a character <j>, 

and we have tp(j) = x since the Weil pairing Tp{E) A Tp{E) = Zp(l) means 
that X is the determinant of the representation of Gp^ on Tp{E). Note that 
(j) has infinite order. The same is true for ij) since and x become equal 
after restriction to the inertia subgroup GpuDr. This explains why S = for 
tbl^ , as used to prove proposition 2.2. In this case, xV'~^ = hence 

H^{GMr,, (Qp/^p)(xV'~^)) is isomorphic to E{mn)p, where m,, is the residue 
field for M,,. These facts lead to a version of proposition 2.2 for some infinite 
extensions of Fy . 

Proposition 2.4. Assume that K is a Galois extension of Fy, that Ga\{K / Fy) 
contains an infinite pro-p subgroup, and that the inertia subgroup of Gal{K / Fy) 
is of finite index. Then Im{KK) = Im(AK); where kk is the Kummer homo- 
morphism for E over K and Xk is the canonical homomorphism 

H\K,Cy)^H\K,En. 

Proof. Let M run over all finite extensions of Fy contained in K. Then 
lm{K,K) = Limlm(KM), Im(Ai<-) = Limlm(AM), and Im(KM) = Im(AM)div 

by proposition 2.2. But Im(AM)/Iin(AM)div has order bounded by \E(m)p\, 
where m is the residue field of M. Now |m| is bounded by assumption. Hence 
it follows that lm{\K) /^^{kk) is a finite group. On the other hand, Gk 
has p-cohomological dimension 1 because of the hypothesis that Gdl{K/Fy) 
contains an infinite pro-p subgroup. (See Serre, Cohomologie Galoisienne, 
Cliapitre II, §3.) Thus if C is a divisible, p-primary Gif-module, then the 
exact sequence 0— > C[p] C-^C induces the cohomology exact se- 
quence H^{K,C)^H^{K,C) H^{K,C[p]). The last group is zero and 
hence H^{K, C) is divisible. Applying this to C = C^, we see that Im(Aif ) is 
divisible and so Im(Kif) = Im(Aif ). ■ 

If Foe denotes the cyclotomic Zp-cxtcnsion of F , then every prime v of 
F lying over p is ramified in Fqc/F. If 77 is a prime of i^oo over v, then K — 
(^00)77 satisfies the hypothesis of proposition 2.4 since the inertia subgroup of 
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r = Gal(Foo/F) for 77 is infinite, pro-p, and has finite index in F. Propositions 

2.1, 2.2, and 2.4 will allow us to give a fairly straightforward proof of theorem 

1.2, which we will do in section 3. However, in section 4 it will be useful to 
have more precise information about Im(A,,)/Im(K^), where 77 is a prime for 
a finite extension M of F lying over p. What we will need is the following. 

Proposition 2.5. Let be a finite extension of Fy, where v\p. Let rur, be 
the residue field for M^. Then 

Im(A^)/Im(K^) ^ E{mr,)p. 
Proof. The proof comes out of the following diagram: 

^ ^(m) ® (Qp/Zp) H'iMr,, a) ^ H\Mr„J'{m))p 

^ E{Mr,) ® (Qp/Zp) X H^Mr,, E\p°°]) H^Mr,, E(F,))p 

Here is the formal group for E (which has height 1), tn is the maximal 
ideal of M^. The upper row is the Kummer sequence for !F{m), based on the 
fact that T{m) is divisible. The first vertical arrow is surjcctivc since JF(m) 
has finite index in E{Mrj). Comparing Z^-coranks, one sees that lm{Kj^) = 
H^{GMr,,Ov)div A simple diagram chase shows that the map 

H\M^,C,)/H\M^,C,U^ — > Im(A,,)/Im(A^)div (3) 

is surjective and has kernel isomorphic to ker(e). The exact sequence 

^ J^{m) ^ E(F,) ^ E(f,) ^ 0, 

together with the fact that the reduction map -E(M^) E{m^) is surjec- 
tive implies that e is injective. (For the surjectivity of the reduction map, 
see proposition 2.1 of [Si].) Therefore, the map (3) is an isomorphism. Com- 
bining this with the observation preceding proposition 2.4, we get the stated 
conclusion. ■ 

Assume now that E has split, multiplicative reduction at v. Then one has 
an exact sequence 

^ a ^ ^ Qp/Zp ^ 

where Cy = iip<x, . The proof of proposition 2.2 can be made to work and 
gives the following result. For any algebraic extension K of Fy, we have 
Im{KK) — Im{\K)- It is enough to prove this when [K : Fy] < 00. Then 
Im(Kif) is divisible and has Zp-corank [if :Qp]. H^{K,Cy) is divisible and 
has Zp-corank [ifiQ ] + 1. But the kernel of \k:H^{K, Cy) H^{K, E\p°°]) 
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is isomorphic to Q^/Zp. Thus, Im(Aif ) and Ini(Kx) are both divisible and 
have the same Zp-corank. The inclusion Im(/tif ) C Im(Ax) can be seen by 
noting that in defining hk, one can assume that a G E{K) ® (Q^/Zp) has 
been written as a = a (g) where a € ^(m). Here is the formal 

group for m is the maximal ideal for K . Then, since ^(m) is divisible, one 
can choose b e ^(tn) so that p*6 = a. The 1-cocycle (/i^ then has values in 
Cy = T{m)\p°°\. Alternatively, the equality lm.{KK) = Im(A/i-) can be verified 
quite directly by using the Tate parametrization for E. 

If E has nonsplit. multiplicative reduction, then the above assertion still 
holds for p odd. That is, Im(Kif) — Im(A_R-) for every algebraic extension K 
of Fy. We can again assume that [K:Fy] < oo.li E becomes split over K, 
then the argument in the preceding paragraph applies. If not, then lemma 2.3 
and (2) imply that H^{K, C„) is divisible and has Zp-corank [iCiQp]. Just as 
in the case of good, ordinary reduction, we see that Im(/tx) = Iiii(Aif)- (It 
is analogous to the case where E{k)p = 0, where k is the residue field of K.) 
Now assume that = 2. If [K:Fy] < oo and E is nonsplit over K, then we have 
H'^{K,Cv)/H'^iK,Cv)dw = TLjlTL by (2), since Vx"^ will be the unramified 
character of Gk of order 2. Thus, we obtain that \va{KK) = Im(Ajf )div and 
that [Im(Aif ) : Im(Kif )] < 2. Using the same argument as in the proof of 
proposition 2.5, we find that this index is equal to the Tamagawa factor 
\E{K') : jF(mx)] for E over K. This equals 1 or 2 depending on whether 
ord/fOs) is odd or even. Finally, we remark that proposition 2.4 holds when 
E has multiplicative reduction. The proof given there works because the index 
[Im(AAf):Im(KM)] is bounded. 

For completeness, we will state a result of Bloch and Kato describing 
\m.{KK) when E has good, supersingular reduction and \K : F^ < oo. It 
involves the ring Bcris of Fontaine. Define 

Hj {K, Vp{E)) = ker {H\K, Vp{E)) ^ H\K, Vp{E) ® Sens)) • 

The result is that Im(Kif) is the image of Hj{K,Vp(E)) imder the canoni- 
cal map H'^{K,Vp{E)) H\K,Vp{E)/Tp{E)), noting that Vp{E)/Tp{E) is 
isomorphic to E\p°°]. This description is also correct if E has good, ordinary 
reduction. 

If E has supersingular reduction at v, where v\p, and if K is any ramified 
Zp-extension of Fy, then the analogue of proposition 2.4 is true. In this 
case, Cy = E[p°^] since E[p°°] = 0. Thus, the result is that Im(K^) = 
H^{K, E\p°°]). Perhaps the easiest way to prove this is to use the analogue 
of Hubert's theorem 90 for formal groups proved in [CoGr]. If denotes the 
formal group (of height 2) associated to E, then H^{K,J^{m)) = 0. (This 
is a special case of Corollary 3.2 in [CoGr].) Just as in the case of Kummer 
theory for the multiplicative group, we then obtain an isomorphism 

: ^(mx) ® {%/:s:p)^H\K,Cy) 
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because C„ = ^(m)[p°°]. We get the result stated above immediately, since 
E{K) ® (Qj,/Zp) = ^(mx) ® (Qp/Zp). 

The assertion that Im(K/f) = H^{K,E[p°^]) is proved in [CoGr] under the 
hypotheses that E has potentially supersingular reduction at v and that 
K/Fy is a "deeply ramified extension" (which means that K/Fy has infinite 
conductor, i.e., K ^ F^*^ for any t > 1, where Fy*^ denotes the fixed field for 
the t-th ramification subgroup of Ga\(Fy/Fy)). A ramified Zp-cxtcnsion K of 
Fy is the simplest example of a deeply ramified extension. As an illustration of 
how this result aff'ects the structure of Selmer groups, consider the definition 
of SelE{M)p given near the beginning of this section. If E has potentially 
supersingular reduction at a prime v of F lying over p and if M^/Fy is 
deeply ramified for all r]\v, then the groups H^{Mr,, £'[p°°])/Im(«;^) occurring 
in the definition of Sc\e{M)p arc simply zero. In particular, if M = Foe, the 
cyclotomic Zj,-extension of F, then the primes rj of F^o lying over primes 
of F where E has potentially supersingular reduction can be omitted in the 
local conditions defining ScIe{Foc)p- This is the key to proving theorem 1.7. 

One extremely important consequence of the fact that the Selmer group 
for an elliptic curve E has a description involving just the Galois represen- 
tations attached to the torsion points on E is that one can then attempt to 
introduce analogously-defined "Selmer groups" and to study all the natural 
questions associated to such objects in a far more general context. We will 
illustrate this idea by considering A, the normalized cusp form of level 1, 

oo 

weight 12. Its g-expansion is Z\ = ^ T{n)q", where T{n) is Ramanujan's tau 

n=l 

function. Deligne attached to Z\ a compatible system {V;(Z\)} of /-adic repre- 
sentations of G(jj. Consider a prime p such that p | t{p). For such a prime p, 
Mazur and Wiles have proved that the action of Gq^ on Vp{A) is reducible 
(where one fixes an embedding Q ^ Qp, identifying Gq^ with a subgroup of 
Gq). More precisely, there is an exact sequence 

^ Wp{A) ^ Vp{A) ^ Up{A) ^ 

where Wp{A) is 1-dimensional and Gq^ -invariant, the action of Gq^ on Up{A) 
is unramified, and the action of Frobp on Up{A) is multiplication by ap (where 
ap is the p-adic unit root of t"^ — T{p)t + p^^). Let Tp{A) be any Gq-invariant 
Zp-lattice in Vp{A). (It turns out to be unique up to homothety for p \ t{p), 
except for p =^ 691, when there arc two possible choices up to homothety.) 
Let A = Vp{A)/Tp{A). As a group, A = (Qp/Zp)^. Let G denote the image 
of Wp{A) in A. Then G = <^p/'S.p as a group. Here then is a definition of the 
p-Selmer group iS'a(Q)p for A over Q. 

5a(Q)p = ker(i/i(Q,yl) ^ [] ifi(Q„, 
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where v runs over all primes of Q. Here we take = for v ^ p, analogously 
to the elliptic curve case. One defines Lp = Im(Ap)div, where 

Xp:H\%,C)^H\%,A) 

is the natural map. In [Gr3], one can find a calculation of ^^(Q)^, and also 
S'a(Qoo)p' fo'^ P — 23, and 691. One can make similar definitions whenever 
one has a j>adic Galois representation with suitable properties. 

3. Control Theorems. 

Wc will now give a proof of theorem 1.2. It is based on the description of 
the images of the local Kummer homomorphisms presented in section 2, 
specifically propositions 2.1, 2.2, and 2.4. We will also prove a special case 
of conjecture 1.6. Let E be any elliptic curve defined over F. Let M be an 
algebraic extension of F . For every prime 77 of M, we let 

HE{Mr,) = H\Mr„E\p°°])/lm{Kr,). 

Let Ve{M) = Y\ HE{Mr,), where r] runs over all primes of M. Thus, 

Se\EiM)p = ker {H^ (M , E[p°"]) Ve{M)) , 

where the map is induced by restricting cocycles to decomposition groups. 
Also, we put 

gE{M) - Im {H\M, E\p'^]) ^ Ve{M)) . 
Let Foo ={}Fnhe the cyclotomic 2p-extension. Consider the following com- 

n 

mutative diagram with exact rows. 

^ SelB(F„)p > H\F^, E[p°°]) > Ge{F,,) ^ 

Sn hn 9n 

^SelEiF^)^- ^H\Foo,E[p^]f- -^^(Foo)^". 

Here Fn = Ga\{F^/Fn) = F^" . The maps s„, /i„, and g„ are the natural 
restriction maps. The snake lemma then gives the exact sequence 

— » ker(s„) ker(/i„) — ^ ker((7„) ^ coker(s„) coker(/i„). 

Therefore, we must study ker(/i„), coker(/i„), and ker(g(„), which we do in a 
sequence of lemmas. 

Lemma 3.1. The kernel of hn is finite and has bounded order as n varies. 
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Proof. By the inflation-restriction sequence, ker(ft,„) = H^iFn, B), where B 
is the p-primary subgroup of E^Fao)- This group B is in fact finite and hence 
H^(rn,B) = Hom(r'„,i?) for n ^ 0. Lemma 3.1 follows immediately. But 
it is not necessary to know the finiteness of B. If 7 denotes a topological 
generator of T, then H'^{r„,B) = B/{jp" - l)B. Since E{F„) is finitely 
generated, the kernel of 7^ — 1 acting on B is finite. Now B^iv has finite 
Zp-corank. It is clear that 

Sdiv C {jP" - 1)B C B. 

Thus, H^{rn,B) has order bounded by [BiBdiv], which is independent of 
n. If we use the fact that B is finite, then ker(/i„) has the same order as 
ffO(r„,B), namely ■ 

Lemma 3.2. Cokcr(/i„) = 0. 

Proof. The sequence H^F.a, E[p'^]) H\F^, E[p°^]y^ H^{rn,B) is 
exact, where B = H'^ {Foe , E[p°°]) again. But P„ = Zp is a free pro-p group. 
Hence H'^{rn,B) = 0. Thus, /i„ is surjective as claimed. ■ 

Let V be any prime of F. We will let w„ denote any prime of F^ lying over 
V. To study ker((7„), wc focus on each factor in 7'_e(F„) by considering 

rv„:nE{{Fn)vJ^nE{{Foo)r,) 

where 77 is any prime of Fgo lying above w„. {Ve{Fqc) has a factor for all 
such r/'s, but the kernels will be the same.) If v is archimedean, then v splits 
completely in F^/F, i.e., F„ = K^. Thus, ker(rv^) = 0. For nonarchimedean 
V, we consider separately v\p and v\p. 

Lemma 3.3. Suppose v is a nonarchim,edean prime not dividing p. Then 
ker(ru^) is finite and has bounded order as n varies. If E has good reduction 
at V, then ker(r^^) = for all n. 

Proof. By proposition 2.1, H_e(M^) — H^{Mr^, E[p°^]) for every algebraic 
extension of F„. Let By = H'^iK, E\p°°]), where K = (Foo)^. Since v 
is unramified and finitely decomposed in F^/F, K is the unramified Zp- 
extension of Fy (in fact, the only Zp-extension of F^). The group By is 
isomorphic to (Qp/Zp)*^ x (a finite group), where < e < 2. Let Fy^ = 
Gal{K/{Fn)y^), which is isomorphic to Zp, topologically generated by 7^^, 
say. Then 

ker(r,J ^ H^Fy^^By) ^ By/{jy^ - l)By. 

Since E{{Fn)y„) has a finite p-primary subgroup, it is clear that (7v„ — l)By 
contains (-B,;)div (just as in the proof of lemma 3.1) and hence 



|ker(r„J| < |S^/(S„)div|. 



(4) 
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This bound is independent of n and u„. We have equahty if n » 0. Now 
assume that E has good reduction at v. Then, since v 'f p, Fy{E[p°°])/ Fy is 
unramified. It is clear that K C Fy{E\p°°]) and that A = Gal{F^{E[p'^])/ K) 
is a finite, cyclic group of order prime to p. It then follows that = £J[p°°]^ 
is divisible. Therefore, ker(r„„) = as stated. ■ 

One can determine the precise order of ker(r^^), where Vn\v and v is 
any nonarchimcdcan prime of F not dividing p where E has bad reduction. 
This will be especially useful in section 4, where we will need | ker(r„)|. The 
result is: |ker(rt,)| = where c^^ is the highest power of p dividing the 
Tamagawa factor c„ for E at v. Recall that = [E(Fy) : Eq^F^)], where 
Eo{Fy) is the subgroup of local points which have nonsingular reduction at 
V. First we consider the case where E has additive reduction at v. Then 
H'^{Iy, E\p°°]) is finite, where /„ denotes the inertia subgroup of Gp^ - Hence 
By is finite because J„ C Gk- Also, Eo{Fy) is a pro-Z group, where I is the 
characteristic of the residue field for v, i.e., v\l. (Note: Using the notation in 
[Si], chapter 5, we have \Ens{fv)\ = \ fv\ = a power of I and is pro-Z.) 

Since I ^ p, wc have cjf'' = \E{Fy)p\, which in turn equals \By/{"fy — l)By\. 

Hence | ker(rj,)| = c^^ when E has additive reduction at v. (It is known that 
Cy < A when E has additive reduction at v. Thus, for such v, ker(r„) = 
if p > 5.) Now assume that E has split, multiplicative reduction at v. Then 
Cy = ord„(g^'') = ~oidy{jE), where g^'' denotes the Tate period for E at v. 
Thus, g^'' = TT^" -w, where w is a unit of Fy and tt^ is a uniformizing parameter. 
One can verify easily that the group of units in K is divisible by p. By using 
the Tate parametrization one can show that By/(By)(\iv is cyclic of order 
c^^ and that F^ acts trivially on this group. Thus, |kcr(rt,^)| = ci^'' for all 
n > 0. By might be infinite. In fact, (i?t,.)div = Mp°° if f-p ^ Pv', (-B^)div = 
if iJ'p % Fy. Finally, assume that E has nonsplit, multiplicative reduction at 
V. Then c,, = 1 or 2, depending on whether ovdy^jE) is odd or even. Using 
the Tate parametrization, one can see that By is divisible when p is odd (and 
then Vcv{ry) = Q). li p — 2, E will have split, multiplicative reduction over 

K and so again -Bu/(-Bi;)div has order related to ordi,((j^"'). But 7„ acts by 
— 1 on this quotient. Hence H^{ry, By) has order 1 or 2, depending on the 
parity of oidy{q^^^). Hence, in all cases, | ker(r„)| = 

Now assume that v\p. For each n, wc let fy^ denote the residue field for 
{Fn)y^. It doesn't depend on the choice ofvn- Also, since Vn is totally ramified 
in Foo/Fn for n ^ 0, the finite field stabilizes to the residue field of 
(^00)77- We let E denote the reduction of E at v. Then we have 

Lemma 3.4. Assume that E has good, ordinary reduction at v. Then 

\keT{ryJ\ = \EifyJp\'. 
It is finite and has bounded order as n varies. 
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Proof. Let C„ = kev{E[p°°] E[p°°]), where we regard E[p°°] as a sub- 
group of E{Fy). Considering (F„)^,^ as a subfield of F„, wc have lm{Ky^) = 
Im(A„„)div by proposition 2.2. By proposition 2.4, we have Im(K^) = Im(A^), 
since the inertia subgroup of Ga.l{Foo/F) for v has finite index. Thus, we can 
factor ry as follows. 



iIi((F„),„,i;[p-])/Im(A,Jdiv 



H\{Fn)y^,E\p°°])/Im{XyJ 




H\{F^)n,Emim{Xr,) 

Now a„„ is clearly surjective. Hence |ker(rv„)| = |ker(a„„)| • |ker(6„„)|. By 

proposition 2.5, wc have | kcr(a,,^)| = \E{fy^)p\. For the proof of proposition 
1.2, just the boundedness of | ker(a^^)| (and of | ker(6„„)|) suffices. To study 
ker(6„^) we use the following commutative diagram. 



H\{Fr,)y^,Cy) ^ H\{Fr,)y^,E\p-°]) 



■H\{Fr,)y^,En 



■0 



(5) 



HH{F^)^,Cy) ^ HHiF^)r„En ^ H'{{F^)^,En ^0 



The surjectivity of the first row follows from Poitou-Tate Duality, which gives 
H^{M, Cy) = for any finite extension M of Fy. (Note that Cy ^ [ipoo for 
the action of Gm-) Thus, ker(6„^) = ker(d„„). But 

ker(d,J ^ H\iF^)r,/{Fn)y^,E{frj)p) ^ £(/^)p/(7,„ - 1)£(/0p 

where is a topological generator of Ga\{{Foo)tj/ {Fn)y^). Now E{f^)p is 
finite and the kernel and cokernel of — 1 have the same order, namely 
\E[fy^)p\. This is the order of ker(d„„). Lemma 3.4. follows. ■ 

Let denote the finite set of nonarchimedean primes of F which either 
lie over p or where E has bad reduction. If v ^ i^o and w„ is a prime of Fn 
lying over v, then ker(r^^) = 0. For each v G Sq, lemmas 3.3 and 3.4 show 
that I ker(r„„)| is bounded as n varies. The number of primes Vn of F„ lying 
over any nonarchimedean prime v is also bounded. Consequently, we have 
proved the following lemma. 

Lemma 3.5. The order o/kcr(g„) is bounded as n varies. 

Lemma 3.1 implies that kcr(s„) is finite and has bounded order no matter 
what type of reduction E has at v\p. Lemmas 3.2 and 3.5 show that coker(s„) 
is finite and of bounded order, assuming that E has good, ordinary reduction 
at all v\p. Thus, theorem 1.2 is proved. 
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It is possible for s„ to be injective for all n. A simple sufficient condition 
for this is: E{F) has no element of order p. For then E{Foo) will have no 
p-torsion, since F = Gal{Foo/F) is a pro-p group. Thus ker(/i„) and hence 
ker(s„) would be trivial for all n. A somewhat more subtle result will be 
proved later, in proposition 3.9. 

It is also possible for s„ to be surjective for all n. Still assuming that E has 
good, ordinary reduction at all primes of F lying over v, here is a sufficient 
condition for this: For each v\p, E^{f^) has no element of order p and, for 
each V where E has had reduction, E[p°"Y^ is divisible. The first part of this 
condition implies that Ey(f^^)p — for all v\p and all n, again using the fact 
that F is pro-p. Thus, ker(r„„) = by lemma 3.4. In the second part of this 
condition, /„ denotes the inertia subgroup of Gf„. Note that v \ p. It is easy 
to sec that if E[p°^Y'' is divisible, the same is true of By = H^{{Fac)j^, E\p°°]) 
for r]\v. Thus, ker(r„^) — for Vn\v, because of (4). The second part of this 
condition is equivalent to p \ c„ . 

We want to now discuss the case where E has multiplicative reduction 
at some v\p. In this case, one can attempt to imitate the proof of lemma 
3.4, taking G,, = T{m}[p°^]. We first assume that E has split, multiplicative 
reduction. Then Cy = /ip=o and we have an exact sequence 

^ E\p°°] ^ Qp/2p ^ 

of Gf,, -modules, where the action on Q^/Zp is trivial. Then H^{{Fn)v„ , Mp°°) 
and hence Im(A^„) are divisible. We have Im(K„^) = Im(A„„) as well as 
Im(K;,,) = Im(A,,). Thus, ker(rv„) = ker(6„^), where by^ is the map 

6„„:ifi((F„)„„,i?[p°°])/Im(A,„) H\(F^\^, E[p'^]) /lm{X^). 

For any algebraic extension M of i^^, we have an exact sequence 

(M, f,poo)^H\M,E\p'^])^H^ (M, Qj,/Zp) ^ (M, ^poo ) ^ 0. 

If [M:Fy] < 00, then Poitou-Tatc Duality shows that H'^{M,^ip^) = %/'S.p, 
whereas H"^ {M , E\p°°]) = 0, which gives the surjectivity of 5m- Thus, ttm is 
not surjective in contrast to the case where E has good, ordinary reduction 
at V. We let tt^^ = mp^^^^, tt^ = Tf(F^)„- Thus, ker(6„^) can be identified 
with Im(7r^^) fl kei{dy^), where dy^ is the map 

dy„ ■.H\{Fr,)y^,%/7Lp) ^ H\{F^\, Qp/Zp). 

The kernel of dy^ is quite easy to describe. We have 

ker«) = Hom(Gal((Foo)^/(-Fn)„J,Qp/2p) 

which is isomorphic to Q^/Zp as a group. The image of -Ky^ is more interesting 
to describe. It depends on the Tate period qp for E, which is defined by 
the equation j{qE) = Je, solving this equation for qe € F^ . Here j{q) = 
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+ 744+ 196884gH for < 1 and Je is the j-invariant for E. Since 

Je G F is algebraic, the theorem of [B-D-G-P] referred to in section 1 implies 
that qe is transcendental. Also, we have \qE\v = bsliT^- Let 

recM : ^ Gal(M"V-^) 

denote the reciprocity map of local class field theory. We will prove the fol- 
lowing result. 

Proposition 3.6. Let M be a finite extension of Fy. Then 

Im(7rM) = {V e Hom(Gal(M«VM),Qp/Zp) | ^(recM(te)) = 0}. 
If M is a 'Z.p- extension of F^, then ttm is surjective. 

Proof. The last statement is clear since Gm has p-cohomological dimension 
1 if M/Fy has profinite degree divisible by p°°. For the first statement, the 
exact sequence 

^ Mp" ^ £;[p"] ^ ^ 

induces a map 7r^'^-ff^(M, if^(M, Z/p"2) for every n > 1. Because 

of the Weil pairing, we have Hom(£[p"], = E\p^\. Thus, by Poitou-Tate 
Duality, tt^^ is adjoint to the natural map 

whose kernel is easy to describe. It is generated by the class of the 1-cocycle 
(j) : Gm Mp" given by (^(5) = g{ "y^)/ for all g G Gm- The pairing 

is just {(l)q,tp) — > tp{YCCM{q)) for q e , where (j)q is the 1-cocycle associ- 
ated to q as above, i.e., the image of q under the Kummer homomorphism 
M></(M^)P" ^ H^{M,Hpr.). This implies that 

Im(7r^)) = {V e Hom(Gal(M«VM),Z/p"Z) | V(recM(g£)) = 0}, 

from which the first part of proposition 3.6 follows by just taking a direct 
limit. ■ 

Still assuming that E has split, multiplicative reduction at u, the state- 
ment that ker(r^^) is finite is equivalent to the assertion that ker((i^^) % 
Im(7r„„). In this case, we show that | ker(r„^)| is bounded as n varies. For let 
a = recFA<lE)\{F^)^ S Ga\{{Foo)n/ F^). Let e„ = [{Fn)y^:Fy]. Then we have 

rec(i?^)^,^^ {qE)\{F^)^ = f^^" ■ It is clear that 

ker(r„J = {V e Hom(Gal((^^oo)r,/(i^n).J, Qj,/2p) | ^K") = 0} 
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has order equal to [Gal((Foo)^/(F„)„J : (a^-)]. But Gal((Foo)„/i^^) = 2p. 
This index is constant for n > 0. Thus, ker(rt,„) is finite and of constant 
order as n varies provided that a ^ id. Let ^^'^ denote the cyclotomic 
extension of Q^. Then (Foo)r; = ^uQp'"^- We have the following diagram 

F^^ Gal((F^)^/F„) 



rest 



J2^Gal(Q77Q^) 

where the horizontal arrows are the reciprocity maps. It is known that the 

group of universal norms for (Qp-^'^/Qp is precisely /i • (p), where /i denotes 
the roots of unity in Q^. This of course coincides with the kernel of the 
reciprocity map — > Ga^Qp^'^/Qp) and also coincides with the kernel of 
logp (where wc take Iwasawa's normalization logp(p) = 0.) Also, it is clear 
that a id ^ crlajp^" 7^ id- Thus we have shown that ker(r^^) is finite if 
and only if logp(iV^^/(jj^(gf;)) ^ 0. The order will then be constant and is 

determined by the projection of Np^/^^iqE) to Zp in the decomposition 
= (p) X Z^ . One finds that 

I ker(r„J| ~ log^{Np^/^^{qE))/2p[F, n Q^^^ : %] 

whore ^ indicates that the two sides have the same p-adic valuation. 

Assume now that p is odd and that E has nonsplit, multiplicative reduc- 
tion. We then show that ker(rt,„ ) = 0. We have an exact sequence 

O^Hp^(g>(t)^ E\p°°] (Qp/Zp) O <^ ^ 

where (/> is the unramified character of Gp^ of order 2. As discussed in section 
2, we have Im(Kt,,J = Im(A„„). Also 7r„„ is surjective. We can identify ker(rv^) 
with ker((it,„ ) , where dy^^ is the map 

whose kernel is clearly zero. Thus, as stated, ker(r^,^) — 0. (The value of 
^F^/<Si (qe) is not relevant in this case.) If p = 2, then |Im(A^„)/Im(A^„)(jiv| is 
easily seen to be at most 2. Hence, if E has nonsplit, multiplicative reduction 
over {Fn)v„ , we have | ker(r„^)| < 2. (Note: It can happen that (i^oo)jj contains 
the unramified quadratic extension of Fy. Thus E can become split over 
{Fn)v„ for n > 0.) We will give the order of ker(r„) when E has nonsplit, 
multiplicative reduction at v\2. The kernel of has order [Im(At,) : Im(K„)], 
which is just the Tamagawa factor for E at v. (See the discussion following 
the proof of proposition 2.5.) On the other hand, ker(6„) = keT{dy) and this 
group has order 2. Thus, |ker(rv)| ~ 2cy, where Cy denotes the Tamagawa 
factor for E at v. 

The above observations together with lemmas 3.1-3.3 provide a proof of 
the following result in the direction of conjecture 1.6. 
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Proposition 3.7. Assume that E is an elliptic curve defined over F which 
has good, ordinary reduction or multiplicative reduction at all primes v of F 
lying over p. Assume also that logp(A^i?„/Q^(g'^^)) ^ for all v where E has 
multiplicative reduction. Then the maps 

s„:Seb(i^„)p^SelB(Foo)^" 

have finite kernel and cokernel, of bounded order as n varies. 

In the above result, denotes the Tate period for E over Fy. U Je € Qp, 

then so is g^''. Thus, (Ie^) = {q]^^)^^"''^p^ is transcendental according 

to the theorem of Barre-Sirieix, Diaz, Gramain, and Philibert. Perhaps, it 
is reasonable to conjecture in general that NE^/^^iq]^^) is transcendental 

whenever Je € i^^flQ. Then the hypothesis logp(-/V^^/Q^(g^^)) ^ obviously 
holds. This hypothesis is unnecessary in proposition 3.7, if p is odd, for those 
v^s where E has nonsplit, multiplicative reduction. (For p = 2, one needs the 
hypothesis when E has split reduction over {Foo)n-) 

Let X be a profinite yl-module, where A = Zp[[T]], T = 7 — 1, as in 
section 1. Here are some facts which are easily proved or can be found in 
[Wa2]. 

(1) X = TX ^ X = 0. 

(2) X/TX finite X is a finitely generated, torsion A-module. 

(3) X/TX finitely generated over TL^ X is finitely generated over A. 

(4) Assume that X is a finitely generated, torsion A-module. Let 6n denote 
"/P —IgA for n > 0. Then there exists integers a, b, and c such that the 
'S.p-torsion subgroup of XjQnX has order p^" , where en = an + bp^ + c 
for n ^ 0. 

We sketch an argument for (4). Let f{T) be a generator for the characteristic 
ideal of X, assuming that X is finitely generated and torsion over A. If we have 
/(C ^ 1) 7^ for all p-powcr roots of unity, then X/9nX is finite for all n > 
and one estimates its order by studying n/(C ~ 1); where C, runs over the 
p"-th roots of unity. One then could take a = A(/), b = fi{f) in (4). Suppose 
X = A/{h{Ty), where h{T) is an irreducible element of A. If h{T) \ 0^ for 
all n, then we are in the case just discussed. This is true for {h{T)) = pA for 
example. If h{T)\6no for some no > 0, then write 6n = h{T)(f)n, for n > no, 
where </>„ G A. Since 0„ = (1 + T)^ — 1 has no multiple factors, we have 
h{T) I 0„. Then we get an exact sequence 

^ Y/(j)nY ^ X/OnX -> A/h{T)A ^ 

for n > no. Here Y = {h{T)) / {h{TY) ^ A/{h{Ty-^). Then Y/(f>nY is 
finite and one estimates its growth essentially as mentioned above. Now 
A/h{T)A is a free Zp-module of rank = \{h). Thus the Zp-torsion sub- 
group of X/9nX is Y/(f)nY whose order is given by a formula as above. In 
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general, X is pseudo-isomorphic to a direct sum of yl-modules of the form 
\/{h{TY) and one can reduce to that case. One sees that b = ii{f), where 
/ = /(T) generates the characteristic ideal of X. Also, a = A(/) — Aq, where 
Ao = max(rank2p(X/0„X)). The 2p-rank of X/9nX clearly stabilizes, equal 
to Ao for n » 0. 

These facts together with the results of this section have some immediate 
consequences, some of which we state here without trying to be as general as 
possible. For simplicity, we take Q as the base field. 

Proposition 3.8. Let E he an elliptic curve with good, ordinary reduction 
at p. We make the following assumptions: 

(i) p does not divide \E{Wp)\, where E denotes the reduction of E at p. 
(a) If E has split, multiplicative reduction at I, where I ^p, thenp\ovAi{jE)- 

If E has nonsplit, multiplicative reduction at I, then either p is odd or 

ord;(j£;) is odd. 

(ill) If E has additive reduction at I, then has no point of order p. 

Then the map Sel£;(Q)j5 SelB(Q^)p is surjective. //SelB(Q)p = 0, then 

Remark. The comments in the paragraph following the proof of lemma 3.3 
allow us to restate hypotheses (ii) and (iii) in the following way: p f for all 
I ^ p. Here ci is the Tamagawa factor for E a.t I. li E has good reduction at 
/, then Cj = 1. If £^ has additive reduction at /, then q < 4. Thus, hypothesis 
(iii) is automatically satisfied for any p> 5. If E has nonsplit, multiplicative 
reduction at I, then hypothesis (ii) holds for any p > 3. On the other hand, 
if E has split, multiplicative reduction at I, then there is no restriction on 
the primes which could possibly divide c;. Hypothesis (i) is equivalent to 
ttp ^ l(mod p), where ap = l+ p— |£^(Fp)|. 

Proof. We refer back to the sequence at the beginning of this section. We have 
coker(/i„) = by lemma 3.2. The surjectivity of the map Sq would follow from 
the assertion ker(go) = 0. But the above assumptions simply guarantee that 
the map Ve{^) ^b(Qoo) is injective and hence that ker((7o) = 0. For by 
lemma 3.4, (i) implies that ker(rp) = 0. If has multiplicative reduction 

at I ^ p then (ii) implies that OTdi{q^^^) is not divisible by p. This means 



Q;(V«B )/^; ramified. Thus H'^{L,E[p°°]) is a divisible group, where L 



denotes the maximal unramified extension of Q;. Now Gal(L/Q;) = Z. The 
cyclotomic Zp-extension of Q; is (Qoo)?/' where ri\l. Thus, ((Qoo)'j ^ 
H = Gal(L/(Q^)^). Then H acts on H'^{L,E\p°°]) through a finite cyclic 
group of order prime to p. Thus, it is easy to see that Il'^{((S^^)n, E[p°°]) 
is divisible and hence, from (4), wc have ker(r/) = 0. Assume now that 
E has additive reduction at I (where, of course, I ^ p). Then E\p°°Y^ is 
finite, where 7; denotes Gl, the inertia subgroup of Gq^. We know that 
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if E has potentially good reduction at I, then 7; acts on E[p°°] through a 
quotient of order 2''3^ Thus E[p°°Y' = if p > 5, and (iii) is then not 
important. If p = 2 or 3, (iii) sufRces to conclude that -ff"((Qoo)r/) E\p°°]) = 
since Gal((Qgo),,/(Q;) is pro-p. Thus, again, kcr(n) = 0. (We are essentially 
repeating some previous observations.) Finally, if SelE(Q)j, is trivial, then 
so is Sel£;(Q^)^. Let X = Xe{<^^). Then X/TX = 0, which implies that 
X = 0. Hence Sel£;(Q<^) = as stated. ■ 

If we continue to take F = Q, then we now know that the restriction 
map Sel£;(Q)p SelEi^oo)p has finite cokernel if E has good, ordinary 
or multiplicative reduction at p. (In fact, potentially ordinary or potentially 
multiplicative reduction would suffice.) Thus, if SelE(Q)p is finite, then so is 
Sel£;(Qo2)p . Hence, for X = X£;(Qoq), we would have that X/TX is finite. 
Thus, X would be a yl-torsion module. In addition, we would have T \ fsiT). 

Assume that E has good, ordinary reduction at p. If p is odd, then the 
map Sel£;((Q„)p Sel£;((Qo(3)^" is actually injective for all n > 0. To see this, 
let B = H°{(^^,E[p°°]). Then^ker(/i„) = H^{rn,B). The inertia subgroup 
Ip of Gq^ acts on kei{E\p] E[p]) by the Teichmiiller character cj. That is, 

ker{E\p] ^ E\p]) ^ 

for the action of Ip. On the other hand, Ip acts on B through Gal((Qo2),,/Qp), 
where rj denotes the unique prime of lying over p. This Galois group is 
pro-p, being isomorphic to 2p. Since p > 2, u} has nontrivial order and this 
order is relatively prime to p. It follows that 

B n ker(F[p°°] ^ En = {Oe} 

and therefore B maps injectivcly into E[p°^]. Thus, Ip acts trivially on B 
Since p is totally ramified in Qqo/Q, it is clear that F = Gal(Qoo/Q) also 
acts trivially on B. That is, 

B = 7;(Q^)j, = E{q)p. 

Hence ker(/i„) = Hom(F„, B) for all n > 0. Now suppose that (/> is a nontrivial 
element of Hom(r'„ , B) . Let /p"'' denote the inertia subgroup of G((q^)^ . Then 
(j) clearly remains nontrivial when restricted to 

H\l(r\En = Hom(7("),E[p~]). 

But this implies that [</>] ^ Sel£;((Q„)p. Hence ker(s„) = ker(/i„)nSel£;((Q„)p is 
trivial as claimed. This argument also applies if E has multiplicative reduction 
at p. More generally, the argument gives the following result. We let F be 
any number field. For any prime v oi F lying over p, we let e{v/p) denote the 
ramification index for F^/Q^. 

Proposition 3.9. Let E be an elliptic curve defined over F. Assume that 
there is at least one prime v of F lying over p with the following properties: 
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(i) E has good, ordinary reduction or multiplicative reduction at v, 

(ii) e{v/p) < p — 2. 

Then the map Sel^;(F„)p — > SelB(-Foo)p is infective for all n>0. 

Theorem 1.10 is also an application of the results described in this section. 

One applies the general fact (4) about torsion yl- modules to X = Xe{Foc)- 
Then, X/6nX is the Pontryagin dual of Scl£(i^oc)p" • The torsion subgroup of 
X/9nX is then dual to SelE(Foo)p"/(Sel£(i^oc)p")div One compares this to 
Sel£;(F„)p/(Sel£;(F„)p)(jiv, which is precisely lll£;(_F,i)p under the assumption 
of finiteness. One must show that the orders of the relevant kernels and cok- 
ernels stabilize, which we leave for the reader. One then obtains the formula 
for the growth of |inB(-F7i)p|, with the stated A and /i. 

We want to mention one other useful result. It plays a role in Li Guo's 
proof of a parity conjecture for elliptic curves with complex multiplication. 
(See [Gu2].) 

Proposition 3.10. Assume that E is an elliptic curve/F and that SelB(i^oo)p 
is A-cotorsion. Let \e = corankzj,(Scl_E(i^oo)p)- Assume also that p is odd. 
Then 

corank2p(Sel£;(i^)p) = Xe (mod 2). 

Proof. The maps H^{Fn, E[p°°]) -> H^{F^, E\p°°]) have finite kernels of 
bounded order as n varies, by lemma 3.1. Thus, corank^^ (Sel£;(F„)p) is 
bounded above by A^;. Let A'^ denote the maximum of these 2p-coranks. 
Then corankzp(Sel£;(F„)p) — for all n > no, say. For brevity, we let 
Sn = SelE{Fn)p, Tn = (S'„)div, and f/„ = Sn/Tn, which is finite. The 
restriction map Sq — > S',^'^'^^"^^-', and hence the map To j.Gai(F„/_F)^ 
have finite kernel and cokernel. Since the nontrivial Qp-irreducible represen- 
tations of Gal(F„/i^) have degree divisible by p — 1, it follows easily that 
corankzp(T„) = corank2p(To) (mod p — 1). Hence 

corankzp (Selfi (i^)p) = X'e (mod p-1). 

Since p is odd, this gives a congruence modulo 2. Let = SelE{Foo)p and 
let Too = LimT„, which is a /l-submodule of ^oo- Also, Too = (Qp/Zp)-**^. 
Let Uoo = Sao /Too ~ LimJ7„. The map T„ Too is obviously surjective for 
all n > no (since the kernel is finite). This implies that 

I ker([/„ ^Uoo)\<\ ker(5„ ^ Soo)\ 

for n > no, which is of bounded order as n varies. Now a well-known theorem 
of Cassels states that there exists a nondegcnerate, skew-symmetric pairing 



UnXUn^ Qp/Zp. 
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This forces | C/„ | to be a perfect square. More precisely, if the abelian group Un 
is decomposed as a direct product of cyclic groups of orders p^"' , 1 < i < flm 
say, then (?„ is even and one can arrange the terms so that en'' = > 
■ ■ ■ > en"~^^ = Cn"^ ■ We refer to [Gul] for a proof of this elementary result. 
(See lemma 3, page 157 there.) Since the kernels of the maps J7„ Uoo have 
bounded order, the 2p-corank u of C/qo can be determined from the behavior 

(i) (i) 

of the en s as n — > oo, namely, the first u of the e„ s will be unbounded, 
the rest bounded as n ^ oo. Thus u is even. Since u = Xe — ^'ej it follows 
that 

Xe = X'e (mod 2). 

Combining that with the previous congruence, we get proposition 3.10. ■ 

Appendix to Section 3. We would like to give a different and rather novel 
proof of a slightly weaker form of pro^sition 3.6, which is in fact adequate 
for proving proposition 3.7. We let M denote the composition of all 2p- 

extensions of M. For any q e M^, we let Mg denote the composition of all 
2p-extensions M^o of M such that recM(9)|Moo is trivial, i.e., the image of 
q under the reciprocity map Gal(Moo/M) is trivial. This means that 

q G Nm„/m{M^) for all n > 0, where M„ denotes the n-th layer in Moo/M. 
We then say that g is a universal norm for the 2p-extension M^/M. We will 
show that 

Im(7rM)div = Hom(Gal(Mg^/M), %/T.p). (6) 
The proof is based on the following observation: 

Proposition 3.11. Assume that q G is a universal norm for the 2p- 
extension M^/M. Then the image of {q) (g) (Qp/2p) under the composite 
map 

{q) ® (Qp/2p) ^ (Qp/Zp)^ifi(M,Mpoo) ^ ifi(Moo,Mpoo) 

is contained in H^{M^. ^ip^)/^-^\-^, where A = 2p[[Gal(Moo/M)]]. 

Proof. To justify this, note that the inflation-restriction sequence shows that 
the natural map 

is surjective and has finite kernel. Here F = Ga\{Maa/M), F„ = Fp" = 
Gal(Mao/M„). But H^{Mn, t-ip'^) is isomorphic to (Qp/Zp)*P''+i as a group, 
where t = [M :(Qp]. Thus, H^{Moc, fJ-p-^)^" is divisible and has Zp-corank 
tp"" + X = {Mao J Mp~ ) I then X is a finitely generated yl-module with 



34 Ralph Greenberg 



the property that X/e^X ^ Z*p''+^ for all n > 0, where 6'„ = 7^" - 1 G A, 
and 7 is some topological generator oi F . It is not hard to deduce from this 
that X = A* x'Kp, where Zp = XA-tors is just A/OqA. Letting A denote the 
Pontryagin dual of A, regarded as a discrete Tl-module, we have 

jy^(Mo,,/Xpoo)^l*x (Qp/Zp), 

where the action of F on Q^/Zp is trivial. Thus, -ff^(Moo,Mp°°)/i-div — A*, 
noting that the Pontryagin dual of a torsion-free yl-module is yl-divisible. 
Hence (i?^(Moo, /ipoo)^.div)^ has Zp-corank t. The maximal divisible sub- 
group of its inverse image in (g) (Qp/Zp) is isomorphic to (Qp/Zp)*. 
We must show that this "canonical subgroup" of (g) (Qp/Zp), which the 
Zp-extension M^/M determines, contains (Qp/Zp) whenever g is a uni- 
versal norm for M^jM. Since Gal(Moo/M) is torsion-free, we may assume 
that q ^ [M^y. For every n > 0, choose g„ G so that NM„/M{qn) = 
q. Fix m > 1. Consider a = q® (l/p"")- In O (Qp/Zp), we have 
^Mn/Miotn) = ex., where = (Xi (l/p"*). Let 5, 3„ denote the images 
of a, an in (g) (Qp/Zp)/(M^ ® (Qp/Zp))^-div. The action of F on this 
group is trivial. Hence p"a„ = a. But 5„ has order dividing p™. Since n is 
arbitrary, we have 5 = 0, which of course means that the image oi q® (l/p™) 
is in H^{Moo, Mp°°)A-div This is true for any m > 1, as claimed. ■ 

We now will prove (6). We know that H^{M, G^pf^p) has Zp-corank 1. 

Thus, Im(7rM) has Zp-corank t, which is also the Zp-corank of Gal{Mqj^/M). 
To justify (6), it therefore suffices to prove that Hom(Gal(Moo/M), Qp/Zp) 

is contained in Im(7rM) for all Zp-extensions M^o of M contained in Mg^. 
We do this by studying the following diagram 

^H\M,Hj,oo)/B ^ H\M,E[p°°]) H\M,%/:S.p) 

a be 

0^{H\M^,^ip^)/B^y {H\M^,E\p^\)r (iJi(Moo,Qp/Zp)^ 



where B is the image of (qs) (S> (Qp/Zp) in H^{M, fipoc), which is the kernel 
of the map H^{M,Hpoo) H^{M,E^°°]). Thus the first row is exact. We 
define B^o as the image of B under the restriction map. The exactness of the 
second row follows similarly, noting that B^c is the image of (qs) d) {^p/'^p) 
in i?^(Moo,Atpoo). Now ker(c) = Hom(Gal(Moo/M), Qp/Zp) is isomorphic 
to Qp/Zp. We prove that ker(c) C Im(7rM) by showing that Im(c o ttm) = 
Im(e o b) has Zp-corank t — 1. The first row shows that H^{M,E\p'^]) has 
Zp-corank 2t. Since b is surjective and has finite kernel, the Zp-corank of 
H^{Moo,E[p^]y is also 2t. But H^{M^, jipoo) ^ 1* x (Qp/Zp) and Boo is 
contained in the yl-divisible submodule corresponding to A* by proposition 
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3.11. One can see from this that H^{MaoT jjip^)/ B^o is also isomorphic to 
A* X (Qp/2p). (This is an exercise on yl-modules: If X is a free yl-module 
of finite rank and y is a /1-submodule such that X/Y has no Zp-torsion, 
then y is a free yl-module too.) It now follows that {H^{M^,iip^)/B^)^ 
has Zp-corank t+1. Therefore, Im(e) indeed has Zp-corank t — 1. 

4. Calculation of an Euler Characteristic. 

This section will concern the evaluation of /£;(0). We will assume that E has 
good, ordinary reduction at all primes of F lying over p. We will also assume 
that ScIe{F)p is finite. By theorem 1.4, Scl£;(Foo)p is then yl-cotorsion. By 
definition, fsiT) is a generator of the characteristic ideal of the yl-module 
Xe{Foc) = Hom(Sel£;(i^oo)p,Qp/2p). Since Sel£;(J'oo)p is finite by theorem 
1.2, it follows that Xe{Foc) /TXe{F^) is finite. Hence T f /^(T) and so 
/b(0) ^ 0. The following theorem is a special case of a result of B. Perrin- 
Riou (if E has complex multiplication) and of P. Schneider (in general). (See 
[Pel] and [Schl].) For every prime v of F lying over p, we let E-^ denote the 
reduction of E modulo v, which is defined over the residue field /„. For primes 
V where E has bad reduction, we let c„ = [E{Fy):EQ{Fy)] as before, where 
Eo{Fy) denotes the subgroup of points with nonsingular reduction modulo v. 
The highest power of p dividing c„ is denoted by c^K Also, if a, 6 e Qp , we 
write a ^ 6 to indicate that a and b have the same p-adic valuation. 

Theorem 4.1. Assume that E is an elliptic curve defined over F luith good, 
ordinary reduction at all primes of F lying over p. Assume also that Sel^(i^)p 
is finite. Then 

fE{0) ~ ( n c^J'MU\^vifv)pnSelEiF)p\/\E{F)p\^ 

V bad v\p 

Note that under the above hypotheses, SelE{F)p = IIl£;(F)p. Also, we have 

\Ev{fv)\ = (1 - C(v){'i- - I3v), where ayfSy = N{v), ay + l3y = Uy e Z, and 
p \ Gy. It follows that ay, fly G Q^. We can assume that ay G Z^ . Hence 

p I \Ey{fy)\ if and only if = 1 (mod p). We say in this case that v is an 
anomalous prime for E, a terminology introduced by Mazur who first pointed 
out the interest of such primes for the Iwasawa theory of E. In [Mazl], one 
finds an extensive discussion of them. 

We will prove theorem 4.1 by a series of lemmas. We begin with a general 
fact about yl-modules. 

Lemma 4.2. Assume that S is a cofinitely generated, cotorsion A-module. 
Let f{T) be a generator of the characteristic ideal of X = Hom(S', Qp/Zp). 
Assume that is finite. Then Sr is finite, /(O) ^ 0, and /(O) ~ |S'^|/|/S'r|. 
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Remark. Note that W{r,S) = for i > 1. Hence the quantity \S^\/\Sr\ 
is the Euler characteristic \H°{r, S)\/\H^{r, S)\. Also, the assumption that 
is finite in fact impUes that S is cofinitely generated and cotorsion as a 
yl-module. 

Proof of lemma 4- 2- By assumption, we have that X/TX is finite. Now X is 
pscudo-isomorphic to a direct sum of yl-modulcs of the form Y = A/{g(T)). 
For each such Y, we have Y/TY = A/{T,g{T)) = ^p/{g{0)). Thus, Y/TY 
is finite if and only if g{0) 0. In this case, we have ker(T:y Y) = 0. 
/^From this, one sees that X/TX is finite if and only if /(O) ^ 0, and then 
obviously ker(T :X—^X) would be finite. Thus, Sr is finite. Since both 
Euler characteristics and the characteristic power series of yl-modules behave 
multiplicatively in exact sequences, it is enough to verify the final statement 
when S is finite and when Hom(S', (Q^/Zp) = AI{g(T)). In the first case, the 
Euler characteristic is 1 and the characteristic ideal is A. The second case is 
clear from the above remarks about Y. ■ 

Referring to the diagram at the beginning of section 3, we will denote sq, 
ho, and go simply by s, and g. 

Lemma 4.3. Under the assumptions of theorem 4-1, we have 

\Se\E{Foo)^\ = \SclE{FUkcT{g)\/\E{F)p\. 

Proof We have \{SelE{F^)p\/\Se\E{F)p\ = |coker(s)|/| ker(s)|, where aU the 
groups occurring are finite. By lemma 3.2, coker(/i) = 0. Thus, we have an 
exact sequence: ker(s) kcr(/i) ker(g) coker(s) 0. It follows 
that |coker(s)|/| ker(s)| = | ker(5')|/| ker(/i)|. Now we use the fact that E[Faa)p 
is finite. Then 

ker(/i) = H\r,E{Foo)p) = {E{Foo)p)r 

has the same order as H^{r, E{F^)p) — E{F)p. These facts give the formula 
in lemma 4.3. ■ 

The proof of theorem 4.1 clearly rests now on studying |kcr(g)|. The 
results of section 3 allow us to study ker(r), factor by factor, where r is the 
natural map 

r:VE{F)^VE{Foo)- 

It will be necessary for us to replace Ve{*) by a much smaller group. Let S 

denote the set of primes of F whore E has bad reduction or which divide p 
or oo. By lemma 3.3, we have ker(r„) =0\iv^S. Let V^{F) = Y['^e{Pv), 

where the product is over all primes of F in E. We consider V§{F) as a 
subgroup oiVE{F)- Clearly, ker(r) C (F). Thus |ker(r)| = n|ker(r^)|, 

V 

where v again varies over all primes in S. For v\p, the order of ker(r„) is 
given in lemma 3.4. For v \ p, the remarks after the proof of lemma 3.3 show 
that I ker(r^)| ~ We then obtain the following result. 



Iwasawa Theory for Elliptic Curves 



37 



Lemma 4.4. Assume that E/F has good, ordinary reduction at allv\p. Then 
|ker(r)|~( n ci^^)(n 

V bad v\p 

Now let g^{F) = lm{H\Fs/F,E[p'^]) V§{F)), where Fs denotes 
the maximal extension of F unramificd outside of S. Then 

ker(5) =ker(r)ne|(-F). 

We now recall a theorem of Cassels which states that 'P§{F)/Q§{F) = 
E{F)p. (We will sketch a proof of this later, using the Duality Theorem 
of Poitou and Tate.) It is interesting to consider theorem 4.1 in the case 
where E{F)p = 0, which is of course true for all but finitely many primes 
p. Then, by Cassels' theorem, ker((7) = ker(r). Lemmas 4.3, 4.4 then show 
that the right side of ^ in theorem 4.1 is precisely |Sel_B(Foo)p |- Therefore, 
in this special case, by lemma 4.2, theorem 4.1 is equivalent to asserting 
that (Sel£;(Foo)p)r = 0. It is an easy exercise to see that this in turn is 
equivalent to asserting that the yl- module Xe{Foo) has no finite, nonzero A- 
submodulcs. In section 5 we will give an example where Xe{Foc) docs have 
a finite, nonzero yl-submodule. All the hypotheses of this section will hold, 
but of course E{F) will have an element of order p. 

The following general fact will be useful in the rest of the proof of theorem 
4.1. We will assume that G is a profinite group and that A is a discrete, p- 
primary abelian group on which G acts continuously. 

Lemma 4.5. Assume that G has p-cohomological dimension n>l and that 
A is a divisible group. Then H^{G,A) is a divisible group. 

Proof. Consider the exact sequence 0— >A[p]^A^A— >0, where the map 
A A is of course multiplication by p. This induces an exact sequence 

Since the last group is zero, H"{G,A) is divisible by p. The lemma follows 
because H'^{G,A) is a p-primary group. ■ 

We have actually already applied this lemma once, namely in the proof 
of proposition 2.4. We will apply it to some other cases. A good reference 
for the facts we use is [Se2]. Let w be a nonarchimedean prime of i^, ry a 
prime oiFoo lying above v. Then Gal((Foo)r,/F^) = 2p, as mentioned earher. 
Thus, Gi^F^) has p-cohomological dimension 1. Hence iJ^((Foo)r;, -E[p°°]) 
must be divisible, and consequently the same is true for 7i_E((-F'oo)r/). As 
another example, Gal(i^i;/F) has p-cohomological dimension 2 if p is any 
odd prime. Let As ~ i?[p°°] ® (k*), where n-.F ^ 1 + 2p2p is an isomorphism 
and s e Z. [A^ is something like a Tate twist of the G^-module E\p°°]. One 
could even take s G Zp.) It then follows that H'^ {Fs / F, Ag) is a divisible 
group. 
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Lemma 4.6. Assume that Sel_E(-Foo)p is A-cotorsion. Then the map 
H\Fs/F^,E\p^])^VE{F^) 

is surjective. 

Remark. We must define V§{F^) carefully. For any prime v in S, we define 

V^^\F^)=UmV'^^\F^) 

where = H We((J;)„J and is as defined at the beginning 

of section 3. The maps V^j^\Fn) are easily defined, considering 

separately the case where Vn is inert or ramified in Fn+i/Fn (where one uses 
a restriction map) or where w„ splits completely in F„+i/Fn (where one uses 
a "diagonal" map). If v is nonarchimedean, then v is finitely decomposed in 
F^/F and one can more simply define V^\Fao) = Yl ^^((^oo)??)) where 

Tl\v 

T] runs over the finite set of primes of F^o lying over v. If v is archimedean, 
then V splits completely in Foc/F. We know that Im(Ki,,^^ ) = for Thus, 
T-iE{{F„)vJ = HEiFy) = H'^{Fy,E\p°°]). Usually, this group is zero. But it 
can be nonzero if p = 2 and Fy = JR. In fact, 

H\Fy,E[2°°]) = E{Fy)/E{FyU^, 

where E{Fy)con denotes the connected component of the identity of E{Fy). 
Therefore, obviously H'^ {Fy , E[2'^]) has order 1 or 2. The order is 2 if E[2] 
is contained in E{Fy). We have 

v'^E\Fn) = H\Fy,E[2^]) ® Z2[Gal(F„/F)], 

which is either zero or isomorphic to (Z/2Z)[Gal(F„/F)]. In each of the 
above cases, V^^\f^) can be regarded naturally as a Tl-module. If v is 
nonarchimedean then the remarks following lemma 4.5 show that, as a group, 
'Pe\^'x) divisible. If v is archimedean, then usually ^^"^(i^oo) = 0. But, 
\i p = 2, Fy = ]R, and £^[2] is contained in E{Fy), then one sees that 
V^eH^oo) = Hom(^/2yl, Z/2Z) as a ^-module. (One uses the fact that 
^B^-F^oo)^" = ^B^(-Fn) for all n > and the structure of V^E^^n) men- 
tioned above.) Finally, we define V§{F^) = H 'Pe\Foo)- 

Proof of Lemma 4-6. We can regard V§ (foo) as a /I- module. The idea of the 
proof is to show that the image of the above map is a yl-submodule of V§ (Foe) 
with finite index and that any such ^-submodule must be V§{Fao)- Wc will 
explain the last point first. If p is odd, the remarks above show that each 
factor in 'P§{F^) is divisible. Hence V§{F^) is divisible and therefore has 
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no proper subgroups of finite index. If p = 2, one has to observe that the factor 
(F^) of V§ (Foo) coming from an archimedean prime v of F is a ^-module 
whose Pontryagin dual is cither zero or isomorphic to (A/2 A). Since A/ 2 A 
has no nonzero, finite yl-submodules, we see that V^e \Foo) has no proper yl- 
submodules of finite index. Since the factors ■P^'(i^oo) for nonarchimedean v 
are still divisible, it follows again that V§{F^) has no proper yl-submodules 
of finite index. 

Now we will prove that the image of the map in the lemma has finite 
index. (It is clearly a yl-submodidc.) To give the idea of the proof, assume 
first that Scl£;(F„)p is finite for all n > 0. Then the cokernel of the map 
H'^{Fs/F^,E[p°°]) V^iF^) is isomorphic to E{Fn)p by a theorem of 
Cassels. But \E{Fn)p\ is bounded since it is known that E{Fao)p is finite. 
It clearly follows that the cokernel of the corresponding map over F^o is 
also finite. To give the proof in general, we use a trick of twisting the Galois 
module E\p°°\. We let As be defined as above, where s E IL. As Gf^^ -modules. 
As = E\p'^\. Thus, iJi(Foo,^) = ll^[F^,E{Tf°\). But the artion of F 
changes in a simple way, namely iJ^(Foo, ^s) = ii^iF^,E\p^\) ® (k^). Now 
we can define Selmer groups for As as suggested at the end of section 2. 
One just imitates the description of the p-Selmer group for E. For the local 
condition at v dividing p, one uses ® (k"). For v not dividing p, we require 
1-cocycles to be locally trivial. We let SAX^nii ^aA^oc) denote the Selmer 
groups defined in this way. Then Sas{Foc) = SelB(^'oo)p® as yl- modules. 
Now we are assuming that Sel_E(Foo)p is yl-cotorsion. It is not hard to show 
from this that for all but finitely many values of s, SaS-^^oo)^" will be finite 
for all n > 0. Since there is a map SA^iFoo)'"" with finite kernel, 

it follows that SA^iFn) is finite for all n > 0. There is also a variant of 
Cassels' theorem for A^: the cokernel of the global-to- local map for the 
module As is isomorphic to 7?''(F„, A_s). But this last group is finite and 
has order bounded by \E{Foo)p\. The surjectivity of the global-to-local map 
for As over F^o follows just as before. Lemma 4.6 follows since Ag = E[p°°] 
as Gi?^ -modules. (Note: the variant of Cassels' theorem is a consequence of 
proposition 4.13. It may be necessary to exclude one more value of s.) ■ 

The following lemma, together with lemmas 4.2-4.4 implies theorem 4.1. 

Lemma 4.7. Under the assumptions of theorem 4-1, we have 

|ker(5)| = |ker(r)| \{Se\E{F^)p)r\/\E{F)p\. 

Proof. By lemma 4.6, the following sequence is exact: 

^ SelE{F^)p ^ H\Fj:/F^,E[p°°]) ^ VE{F^) ^ 0. 

Now F acts on these groups. We can take the corresponding cohomology 
sequence obtaining 

H\Fj:/Foo,E\p°°]f ^ VEiFoof ^ {{Se\E{Foo)p)r ^ H\Fj:/F^,E\p°°])r. 
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In the appendix, we will give a proof that the last term is zero. Thus we get 
the following commutative diagram with exact rows and columns. 



\ \ \ 

H\Fj:IF^,E\p°-]Y Xv^{F^Y (SelB(F^)p)r ^ 





The exactness of the first row is clear. The remark above gives the exact- 
ness of the second row. The surjectivity of the first vertical arrow is because 
r has p-cohomological dimension 1. The surjectivity of the second vertical 
arrow can be verified similarly. One must consider each v & S separately, 
showing that V^\f) — > 'P^\f^)'" is surjective. One must take into ac- 
count the fact that v can split completely in Fn/F for some n. But then 
it is easy to see that P^"^(F) One then uses the fact 
that Ga\{{F^)r^/[Fn)vr,) has p-cohomological dimension 1, looking at the 
maps for v \ p or d^^ for v\p. For archimcdcan v, one easily verifies that 
'P^\F)^V^\Faa)'" . The surjectivity of the third vertical arrow follows. It 
is also clear that Im(a) is mapped surjectively to Im(6). We then obtain the 
following commutative diagram 

^ g§{F) vE{F) vE{F)/g§{F) o 

^ Im(6) V§{F^f (SelB(F^)p)r ^ 

II I 


^Prom the snake lemma, we then obtain ker(5i) — > ker(r) ker(t) — > 0. 
Thus, I ker(5)| = | kcr(r)|/| kcr(t)|. Combining this with Cassels' theorem and 
the obvious value of | ker(t)| proves lemma 4.7. ■ 

The last commutative diagram, together with Cassels' theorem, gives the 
following consequence which will be quite useful in the discussion of various 
examples in section 5. A more general result will be proved in the appendix. 

Proposition 4.8. Assume that E is an elliptic curve defined over F with 
good, ordinary reduction at all primes of F lying over p. Assume thatSelE{F)p 
is finite and that E{F)p = 0. Then SelE{Foo)p has no proper A-submodules of 
finite index. In particular, if SelE{Foo)p is nonzero, then it must be infinite. 

Proof. We have the map t:E{F)p '^e\E{Foo)r, which is surjective. Since 
E{F)p = 0, it follows that {Sc\E{Foc)p)r = too. Suppose that Sc\E{Fao)p 
has a finite, nonzero yl-modulc quotient M. Then M is just a nonzero, fi- 
nite, abelian p-group on which F acts. Obviously, Mr 0. But Mr is a 
homomorphic image of {SelE{Foo)p)r, which is impossible. ■ 
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Theorem 4.1 gives a conjectural relationship of /e(0) to the value of 
the Hassc-Wcil L-fimction L{E/F,s) at s = 1. This is based on the Birch 
and Swinnerton-Dyer conjecture for E over F, for the case where E{F) is 
assumed to be finite. We assume of course that UIe{F)p is finite and hence 
so is Sel£;(F)p = UIe{F)p. We also assume that L{E/F,s) has an analytic 
continuation to s = 1. The conjecture then asserts that L{E/F,1) ^ and 
that for a suitably defined period 0{E/F), the value L{E/F, l)/Q{E/F) is 
rational and 

L{E/F, l)/Q{E/F) ~ ( n 4^^) |SelB(F)^| / \E{F)p\' . 

ubad 

As before, ^ means that the two sides have the same p-adic valuation. If O 
denotes the ring of integers in F, then one must choose a minimal Wcicrstrass 
equation for E over 0(p), the localization of O at p, to define Q{E/F) (as 
a product of periods over the archimedean primes of F). For v\p, the Euler 
factor for v in L{E/F, s) is 

{l-a,N{v)-'){l-0,N{v)-'), 

where a^, are as defined just after theorem 4.1. Recall that a« € . (We 
are assuming that E has good, ordinary reduction at all v\p.) Then we have 

\E{fv)p\ ~ (1 - a.) ~ (1 - a-') = (1 - (3,N{v)-'). 

The last quantity is one factor in the Euler factor for v, evaluated at s = 1. 
Thus, theorem 4.1 conjecturally states that 

fE{0) ~ (11(1 - f3,N{v)-'f)L{E/F, l)/n{E/F). 

v\p 

For F = (Q, one should compare this with conjecture 1.13. 

As we mentioned in the introduction, there is a result of P. Schneider 
(generalizing a result of B. Perrin-Riou for elliptic curves with complex mul- 
tiplication) which concerns the behavior of fsiT) at T = 0. Wc assume that 
E is an elliptic curve/F with good, ordinary reduction at all primes of F 
lying over p, that p is odd and that F n Q^^ = Q (to slightly simplify the 
statement). Let r = rank(F(F)). Wc will state the result for the case where 
r = 1 and UIe{F)p is finite. (Then SelE{F)p has Zp-corank 1.) Since then 
T|/£(T), one can write /^(T) = TgE{T), where gE{T) e A. The result is 
that 

^^(o)^M^(n cW)(ni^.(/.)pi^)im^(F)pi/iF(F)^i. 

V bad v\p 

Here P € F(F) is a generator of F(F)/F(F)tors and hp{P) is its ana- 
Ij^ic p-adic height. (See [Sch2] and the references there for the definition 
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of hp{P).) The other factors are as in theorem 4.1. Conjecturally, one should 
have hp{P) 7^ 0. This would mean that fsiT) has a simple zero at T — 0. 
But if hp{P) = 0, the result means that gsiO) = 0, i.e., T^\fE{T). If F = <^ 
and E is modular, then B. Perrin-Riou [Pe3] has proven an analogue of 
a theorem of Gross and Zagier for the p-adic L-function Lp(i?/(Q,s). As- 
sume that L{E/<^, s) has a simple zero at s = 1. Then a result of Kolyvagin 
shows that rank(£^(Q)) = 1 and inB((Q) is finite. Assume that P generates 
i?(Q)/i?((Q)tors- Assume that hp{P) ^ 0. Perrin-Riou's result asserts that 
Lp{E/Q„ s) also has a simple zero at s = 1 and that 

L'p{E/<^, l)/hp{P) = (1 - (3pp-'fL'{E/(^, l)/f2Ehoo{P) 

where hoo{P) is the canonical height of P. If one assumes the validity of 
the Birch and Swinnerton-Dyer conjecture, then this result and Schneider's 
result are compatible with conjecture 1.13. 

The proof of theorem 4.1 can easily be adapted to the case where E has 
multiplicative reduction at some primes of F lying over p. One then obtains 
a special case of a theorem of J. Jones [Jo]. Jones determines the p-adic val- 
uation of (/£;(T)/T'')|t=o, where r = rank(i<^(i^)), generalizing the results of 
P. Schneider. He studies certain natural yl-modules which can be larger, in 
some sense, than SelE(foo)p- Their characteristic ideal will contain T'^fE{T), 
where e is the number of primes of F where E has split, multiplicative re- 
duction. This is an example of the phenomenon of "trivial zeros". Another 
example of this phenomenon is the yl-module Soo in the case where p splits 
in an imaginary quadratic field F. As we explained in the introduction, Si^ 
is infinite. That is, a generator of its characteristic ideal will vanish at T = 0. 
For a general discussion of this phenomenon, we refer the reader to [Gr4] . 

To state the analogue of theorem 4.1, we assume that Sel£;(F)p is finite, 
that E has either good, ordinary or multiplicative reduction at all primes 
of F over p, and that ^ogp{Np^/(^^{q^^^)) ^ for all v lying over p where 

E has split, multiplicative reduction. (As in section 3, denotes the Tate 
period for E over Fy.) Under these assimiptions, ker(rt,) will be finite for all 
v\p. It follows from proposition 3.7 that SelB(i^oo)p will be finite and hence 
SelE{Foo)p will be yl-cotorsion. In theorem 4.1, the only necessary change 
is to replace the factor \Ey{fy)p\'^ for those v\p where E has multiplicative 
reduction by the factor | ker(r^)|/clf\ (Note that the factor c^^ for such v 
will occur in Yl ■) The analogue of theorem 4.1 can be expressed as 

V bad 

fE{0) ~ (n^.)( n ciP^)\SelE{F)p\/\E{F)p\^. 

v\p V bad 

If E has good, ordinary reduction at v, then ly = \Ey{fy)p\'^. Assume that E 
has nonsplit, multiplicative reduction at v. lip is odd, then both | ker(r„)| and 
clf^ are equal to 1. If p = 2, then | ker(rv)| = 2c^K (Recalling the discussion 
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concerning ker(r^) after the proof of proposition 3.6, the 2 corresponds to 
|ker(6„)|, and the c^^ corresponds to |ker(a„)| = [Ini(A,;) : Ini(K„)]. In the 
case of good, ordinary reduction at both ker(a„) and ker(&t,) have order 
\Ey{fy)p\.) Thus, if £" has nonspUt, multiphcative reduction at v, one can take 
= 2 (for any prime p). We remark that the Euler factor for v in L{E / F, s) 
is (1 + N{v)~^)~^ . One should take = —1, /3y = 0. Perhaps this factor 
ly = "2 should be thought of as (1 — a~^). (This is suggested by the fact that, 
for a modular elliptic curve E defined over F = Q, the p-adic L-function 
constructed in [M-T-T] has a factor (1 — a~^) in its interpolation property 
when E has multiplicative reduction at p. This is in place of (1 — = 
(1 — (3pP~^)'^ when E has good, ordinary reduction at p.) 

Finally, assume that E has split, multiplicative reduction at v. (Then 
(1 — a~^) would be zero.) We have c^f^ = ordj;(g^'). If we let Q^"'' denote the 
unramified Zp-extension of Qp and Qp-*"^ denote the cyclotomic Zp-extension 
of Qp, then we should take 

^ logp(iVF./Q^(gL"^)) [f;nQ^":Qp] 
" ordp(Ar^„/(,^(g(,'')) 'SpfF.nQrrQp]- 

(Again, we refer to the discussion of ker(r„) following proposition 3.6. This 

time, ker(at,) = and ker(r„) = ker(6t,).) We will give another way to define 
ly , at least up to ap-adic unit, which comes directly from the earlier discussion 
of ker(rj,). Let Fy'^'^ and F™^ denote the cyclotomic and the unramified Zp- 
extensions of Fy. Fix isomorphisms 

: Gal(F77F„) Zp, : Gal(F;"7F„) Zp. 

Then ly ~ 0''^yvccFME^)\F7'')IO''pJ{Tccp^{q'^'''^)\F^..r). The value of ly given 
above comes from choosing specific isomorphisms. 

Appendix to Section 4. We will give a proof of the following important 
result, which will allow us to justify the assertion used in the proof of lemma 

4.7 that, under the hypotheses of theorem 4.1, H'^{Fs/Foo,E[p°°])r = 0. 
Later, we will prove a rather general form of Cassels' theorem as well as a 
generalization of proposition 4.8. 

Proposition 4.9. Assume that SelB(-Foo)p is A-cotorsion. Then the A-mod- 
ule H^{Fj:/Foo,E\p°°]) has no proper A-submodules of finite index. 

In the course of the proof, we will show that H^{Fs/Fao, E[p°°]) has A- 
corank [F:Q] and also that {Fs / F^c , E\p°°]) is yl-cotorsion. For odd p, 
these results are contained in [Gr2]. (See section 7 there.) For p = 2, one 
can modify the arguments given in that article. However, we will present a 
rather different approach here which has the advantage of avoiding the use 
of a spectral sequence. In either approach, the crucial point is that the group 

R\F,:/F^,En = kev{H\Fs/F^,En [] ^^((Foo)^, F[p°°])) 
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is zero, under the assumption that SelE{Foo)p is yl-cotorsion. (Note: It proba- 
bly seems more natural to take the product over all ry lying over primes in E. 
However, if rj is nonarchimcdean, then G(^p^) has p-cohomological dimension 
1 and hence H^{{Fo^)n, E[p°^]) = 0.) 

First of all, we wih determine the Tl-corank of V§{F^). Now ^^"^(^00) 
is yl-cotorsion if w | p. This is clear if v is archimcdcan because 7'^''(-F'oo) 
then has exponent 2. (It is zero if p is odd.) If v is nonarchimcdean, then 
v'^\f) = H^{F^,E\p°^]) is finite. The map V^e \f^) V^^^F^y is sur- 

jective. Hence V^\Foc)^ is finite, which suffices to prove that V^eHFoc) IS 
yl-cotorsion, using Fact (2) about yl-modulcs mentioned in section 3. Alter- 
natively, one can refer to proposition 2 of [Gr2], which gives a more precise 
result concerning the structure of vI^\Foo)- Assume v\p. Let C i"" be the 
decomposition group for any prime rj of F^o lying over v. Then by proposi- 
tion 1 of [Gr2], H^{{Fao)ri, E[p°°]) has corank equal to 2[i^„:Qp] over the ring 
Zp[[Pt,]]. Also, H^{{Foo)ri,Cv) has corank Both of these facts could 

be easily proved using lemma 2.3, applied to the layers in the 2p-extcnsion 
iFoc)r,/Fy. Consequently, HEi{Foo)r,) has Zp[[r„]]-corank equal to [^;,:Qp]. 

It follows that v'^^Foo) has yl-corank equal to [i^„:Qj,]. Combining these 
results, we find that 

corank^ (7^1 (^^oo)) = [i^:Q], 
using the fact that J2[Fv-%] = [F:Q,]. 

v\p 

Secondly, we consider the coranks of the yl-modules {F^ / F^q, E\p°°]) 
and H'^{Fx:/Foo,E[p°°]). These are related by the equation 

comnkA{H\FE/Foo,E[p°^']) = coY&nkA{H^{Fs/Foo, E[p'^]) + 6, 

where S = [Fv-^] = [-F:Q]- As a consequence, we have the inequalities 

v\oo 

comnkA{H\Fs/F^,E[p°°])) > [F:Q]. 

(For more discussion of this relationship, see [Gr2], section 4. It is essen- 
tially the fact that —5 is the Euler characteristic for the Gal(Fx'/-F'oo)-module 
E[p°°] together with the fact that H^{Fs/Foo, E[p°°]) is clearly yl-cotorsion. 
This Euler characteristic of yl-coranks is in turn derived from the fact that 

2 

J2i-'^yoov&nk^^{H\Fj:/Fr„En) = -Sp" 

i=0 

for all n > 0. That is, — is the Euler characteristic for the Gal(i^i;/F„)- 

module E[p°°].) Recalling the exact sequence 

^ SelE{F^)p ^ H\Fj:/F^,E\p'^]) ^ g§{F^) ^ 0, 
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we see that Sel_E(i^oo)p is yl-cotorsion if and only if H^{Fs/Foo,Elp'^]) and 
^e(-Foo) have the same yl-corank, both equal to (The last equality 

is because [-F:Q] is a lower bound for the yl-corank of {Fs / Foo, E\p°°]) 
and an upper bound for the yl-corank of Ge {Pod) (which is a yl-submodule of 
'PEiEoo))- Thus, if we assume that Sc\e(Foo)p is yl-cotorsion, then it follows 
that H^{Fj:/F^,E\p'>°]) has yl-corank [i^:Q] and that H^{Fj:/F^,E\p'^]) 
has yl-corank (and hence is Tl-cotorsion) . By lemma 4.6, we already would 
know that Q^[Foc) has yl-corank [i^:Q]. 

We will use a version of Shapiro's Lemma. Let A = Hom(yl, E[p°^]). Wo 
consider ^ as a yl-module as follows: if G ^ and 6* G yl, then 6(p is defined 
by (6'0)(A) = 4)(0X) for all A G yl. The Pontryagin dual of A is and so A 
has yl-corank 2. We define a yl-linear action of Gal(i^^/_F) on A as follows: if 
^ e ^ and 5 G GaliFs/F), then g{(j)) is defined by 5(</))(A) = 5('/>(k(5)~^A)) 
for all A e yl. Here k is defined as the composite 

Ga.l{Fs/F) ^ r yl^ 

where the second map is just the natural inclusion of F in its completed 
group ring yl. The above definition is just the usual way to define the action 
of a group on Hom(*,*), where we let Gal{Fs/F) act on yl by k and on 
as usual. The yl-linearity is easily verified, using the fact that yl is a 
commutative ring. For any G yl, we will let A[0] denote the kernel of the 

map A^A, which is just multiplication by 9. Then clearly 

A[e]^llom{A/Ae,E[p'^]). 

Let K : 7^ 1 -I- 2pW.p be a fixed isomorphism. If ,s G 2 (or in 2p), then the 
homomorphism k'^ : F ^ 1 + 2p2p induces a homomorphism (Tg : yl — !■ Zp of 
2p-algcbras. If we write yl = 2p[[r]], where T = 7 — 1 as before, then <Ts is 
defined by (Ts{T) = k'^(7) — 1 G p2p. We have ker((Ts) — (9s), where we have 
let 9s ^{T- (k^(7) - 1)). Then yl/yl6's ^ Zp(K''), a Zp-module of rank 1 on 
which Gal{Fj:/F) acts by k\ Then 

A[9s\ = Hom(Zp(K^),^[p°^]) ^ E\p°^] <S> (k-') = yl_, 

as Gal(i^i;/F)-modules. 

The version of Shapiro's Lemma that we will use is the following. 

Proposition 4.10. For all i > 0, H^{Fs/F^, E\p°°]) ^ W{Fj:/F,A) as 
A-modules. 

Remark. The first cohomology group is a yl-module by virtue of the natural 
action of F on W{Fs/ Foo, E\p°°]); the second cohomology group is a yl- 
module by virtue of the yl-module structure on A. 
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Proof. We let A denote E\p°°]. The map </> 0(1), for each (j) & A, defines 
a Gal(Fj;/i^oo)-equivariant homomorphism A ^ A. The isomorphism in the 
proposition is defined by 

H\Fj:/F,A)^H\Fj:/Foo,A) ^ W{Fj:/F^,A). 

One can verify that this composite map is a Tl-homomorphism as follows. 
Gal(i^i:/i^oo) acts trivially on A. We therefore have a canonical isomorphism 

H\Fs/F^,A) ^ nom{A,H\FE/F^,A)) (7) 

The image of the restriction map in (7) is contained in W{Fs/Foo,A)^ , 
which corresponds under (7) to }iomr{A, H^{Fx: / F^c, A)). The action of F 
on A is given by k. But this is simply the usual structure of yl as a yl-module, 
restricted to F C A. Thus, by continuity, we have 

H\Fs/F^,Af ^ RomAiA,H\Fs/Foo,A)) 

under (7). Now llomA{A,H'{Fs/F^,A)) H'{Fs/F^,A) as yl-modules, 
under the map defined by evaluating a homomorphism at A = 1. 

To verify that the map H'{Fs/F,A) H'{Fs/F^,A) is bijective, note 
that both groups and the map are direct limits: 

H\Fs/F,A) = lJ^H\FslF,A[e^''^]), 

W{Fe/F^,A) = UmW{FE/Fn,A). 

Here = (1 + T)p" - 1 and so yl[6'(")] = Hom(2p[Gal(i^„/F)], A). On each 
term the composite map 

^ W{Fj:/Fr,,A[e^''^]) ^ H\Fj:/Fn,A) 

defined analogously to (7) is known to be bijective by the usual version of 
Shapiro's Lemma. The map (7) is the direct limit of these maps (which are 
compatible) and so is bijective too. ■ 

For the proof of proposition 4.9, we may assume that H^{Fs/F,A) has 
yl-corank [F:Q] and that H^{Fs/F,A) is yl-cotorsion. Let s e Z. The exact 
sequence 

0^A[9s] ^A^A — >0 
induces an exact sequence 

H\Fs/F, A)/e,H\Fs/F, A) A H^F^/F, ^[0,]) ^ H^F^/F, A)[es] 

where of course a is injective and b is surjective. Let X denote the Pontryagin 
dual of H^{Fs/F,A). Since X is a finitely generated yl-module, it is clear 
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that ker(X-^X) will be finite for all but finitely many values of s. (Just 
choose s so that 6s f f{T), where f{T) is a generator of the characteristic ideal 
of Xyi-tors- The ^s's are irreducible and relatively prime.) Now Im(a) = ker(6) 
is the Pontryagin dual of ker(X — '-^X). We will show that ker(6) is always 
a divisible group. Hence, for suitable s, ker(X X) = 0. Now if Z is a 

nonzero, finite yl-module, then ker(Z — ^ Z) is also clearly nonzero, since 
9s ^ . Therefore, X cannot contain a nonzero, finite yl-submodule, which 
is equivalent to the assertion in proposition 4.9. 

Assume that p is odd. Then Gal(Fi;/F) has p-cohomological dimension 2. 
Since ^[6'^] = A^s is divisible, it follows from lemma 4.5 that H'^{Fs/F, A[9s]) 
is also divisible. Hence the same is true for H^{Fz;/F,A)[9s]- But since 
H'^{Fs/F,A) is yl-cotorsion, H'^{Fe / F, A)[9s] will be finite for some value 
of s. Hence it must be zero. But this implies that H'^{Fs/F,A) — 0, using 
Fact 1 about yl-modules. Thus ker(6) = H^{Fe/F,A[9s]) for all s and this is 
indeed divisible, proving proposition 4.9 if p is odd. 

The difficulty with the prime p = 2 is that Gal{Fjj / F) doesn't have finite 
p-cohomological dimension (unless F is totally complex, in which case the 
argument in the preceding paragraph works). But we use the following fact: 
the map 

/?„ : H^iGa\{Fs/F),M) ^ JJ H''{F,,M) 

v\oo 

is an isomorphism for all n> 3. Here M can be any p-primary Gal{Fs/F)- 
module. (This is proved in [Mi], theorem 4.10(c) for the case where M is finite. 
The general case follows from this.) The groups H"{Fy,M) have exponent 
< 2 for all n > 1. The following lemma is the key to dealing with the prime 
2. 

Lemma 4.11. Assume that M is divisible. Then the kernel of the map 
(32 : H\Fs/F,M) ^ [] H^F,,M) 

v\oo 

is a divisible group. 

Proof. Of course, if p is odd, then H'^{F^, M) = for v\oo. We already know 
that {Fs I F, M) is divisible in this case. Let p = 2. For any m> 1, consider 
the following commutative diagram with exact rows 

H^{Fs/F, M) — ^ H^{Fs/F, M) ^ H^{Fs/F, Mp™]) 



02 



02 







< lex >< (.25)2™ < lex >< (.15)7 i-r us/c^ s^romn 

v\oo v\oo 



v\oo 
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induced from the exact sequence O^M [2™] M — > M ^ 0. Since the group 
H'^{Fy,M) is of exponent < 2, the map 7 is injective. Since (3 is injective 
too, it follows that ker(a) = ker(/32). Thus ker(/?2) = 2"" H"^ {Fs / F, M) for 
any m > 1. Using this for m = 1,2, we see that ker(/32) = 2ker(/32), which 
implies that ker(/32) is indeed divisible. ■ 

Now we can prove that b : H'^{Fs/F,A[9s]) H'^{Fs/F,A) has a divis- 
ible kernel even when p = 2. We use the following commutative diagram: 



< lex > ^R^Fs/F,A[0s]) < lex > ^H'^{Fs/F,A[e,]) < lex > 



< lex > ^R'^{Fj:/F,A)[es] < lex > ^H'^{Fj:/F,A)[es] < lex > 



, n H^{F,,A[es]) 

v\oo 



, n H^{F,,AM 

v\oo 



The rows are exact by definition. (We define R^{Fs/F, M) as the kernel of the 
map H'^iFs/F, M) ^ l\ H^{Fy,M).) The map b is surjcctive. Now A[es] ^ 

v\co 

A-s is divisible and hence, by lemma 4.11, R'^{Fe/F, A[9s]) is divisible. Under 
the assumption that H'^{Fx:/F,A) is yl-cotorsion, we will show that ker(6) 
coincides with the divisible group R'^{Fjj / F, A[6s]), completing the proof of 
proposition 4.9 for all p. Suppose that v\oo. Since v splits completely in 
F^/F, we have H'^iF^,A) = Romi A, H^{F,, E[p°°])). Of course, this group 
is zero unless p = 2 and H'^{Fy, E[2°°]) = Z/22, in which case H^{F^,A) = 
Hom(yl, Z/2Z) = {A/2A)~ . This last group is divisible by 9s for any s, which 
implies that the map e must be injective. The snake lemma then implies that 
the map d is surjective. Thus R'^{Fx: / F, A)[Os] is divisible for all s S Z. 
But this group is finite for all but finitely many s, since H^{Fx:/F,A) is A- 
cotorsion. Hence, for some s, R'^{Fjj/F,A)[ds] = 0. This implies that the A- 
modulc R'^ {Fjj / F, A) is zero. Therefore, since e is injective, ker(6) = ker((f) = 
R'^(Fs/F,A[0s]) for all s, as claimed. ■ 

The following proposition summarizes several consequences of the above 
arguments, which we translate back to the traditional form. 

Proposition 4.12. H^{Fs / F^, E\p'^]) has A-corank [F:Q] if and only if 
H'^{Fe/F^, E\p°°]) is A-cotorsion. If this is so, then H^Fs/Foo, E^°°]) has 
no proper A-suhmodule of finite index. Also, H"^ {Fx; / F^o, E\p°°]) will be zero 
if p is odd and {A/2A)-cofree if p = 2. 

In this form, proposition 4.12 should apply to all primes p, since one con- 
jectures that H'^{Fs/FootE[p°°]) is always yl-cotorsion. (See conjecture 3 in 
[Gr2].) If E has potentially good or multiplicative reduction at all primes over 
p, then, as mentioned in section 1, one expects that SelB(i^oo)p is ^-cotorsion, 
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which suffices to prove that H'^{Fs/Foo,E\p°°]) is indeed yl-cotorsion. For 
any prime p, the conjecture that SelE{Fn)p has bounded 2j,-corank as n 
varies can also be shown to suffice. 

We must now explain why H^{Fs/Foo, E[p°°])r is zero, under the hy- 
potheses of theorem 4.1. We can assume that Sc\e{Foo)p is yl-cotorsion and 
that H'^{Fs/Fao,E\p°°]) has yl-corank equal to [F:Q]. By proposition 4.9, it 
is enough to prove that {F^ / F^ , E[p°°]) p is finite. Let 

Q = H\Fs/F^,E[p^])/H\Fs/F^,E[p^])A-Ai.. 

Thus, Q is cofinitely generated and cotorsion as a yl-module. Its Pontryagin 
dual is the torsion yl-submodule of the Pontryagin dual of {Fjj /Fqo , E\p°°] ) . 
We have 

H\Fj:/F^,Enr = Qr. 

But Qr and have the same Zp-corank. Also, ^ <Slp/'2.p has 2p-corank 
1. Since the map H^Fs/F, E[p'=^]) H^{Fj:/F^, E\p'^]y is surjective and 
has finite kernel, we see that 

coiank^^{H\Fs/F,E\p°°])) = [F : Q] + corank2^(Qr). 

Now 

Se\E{F)p = ker{H\Fs/F,E[p'^]) ^ V§{F)). 

The Zp-corank of (F) is equal to [i^ : Q] . Since we are assuming that 
Seli=;(F)p is finite, it follows that H^{Fs/F, E[p°°]) has Zp-corank [F:Q] and 
hence that, indeed, Qr is finite which completes the argument. We should 
point out that sometimes H^{Fs / Foot E[p°"])r is nonzero. This clearly hap- 
pens for example when va,-Qk^{E{F)) > [F:(Q]. For then H'^ {Fs / F, E[p°°]) 
must have Zp-corank at least [-F:Q] + 1, which implies that Qr is nonzero. 

We will now prove a rather general version of Cassels' theorem. Let S be 
a finite set of primes of a number field F, containing at least all primes of F 
lying above p and oc'. Wc suppose that M is a Gal(Fs/^')-modulc isomorphic 
to (Qp/Zp)'' as a group (for any d> 1). For each v £ S,we assume that Ly 
is a divisible subgroup of H^{Fy,M). Then we define a "Selmer group" 

SM{F)=keT{H\Fs/F,M) ^ H\Fy,M)/Ly). 

This is a discrete, p-primary group which is cofinitely generated over Zp. Let 

T* =Hom(M,;Upoo) 

which is a free Zp-module of rank d. For each v £ S,we define a subgroup U* 

of H^{Fv,T*) as the orthogonal complement of Ly under the perfect pairing 
(from Tate's local duality theorems) 



H\Fy,M) X H\Fy,T*) ^ Qp/Z, 



(8) 
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Since Ly is divisible, it follows that H^{Fy,T*)/U* is Zp-torsion free. Thus 
U* contains H^{Fy,T*)toTs- We define the Selmer group 

St'{F) = kev{H\Fs/F,T*) ^ J] H\Fy,T*)/U*) 

which will be a finitely generated Zp-module. Let V* = T* (g) Q^. Let M* = 
V* /T* = T* (g) (Qp/Zp). For each v e S, wc can define a divisible subgroup 
LI of i?i(F„,M*) as follows: Under the map H^{F^,T*) H^{Fy,V*), the 
image of U* generates a Q^-subspacc of H^{Fj.,V*). We define i* as the 
image of this subspace under the map H^{Fy,V*) —i- H^{Fy, M*). Thus, we 
can define a Selmer group 

Sm4F) = kev{H'{Fs/F,M*) ^ JJ H\Fy,M*)/Ll). 

One can veriiy that the Zp-corank of Sm*{F) is equal to the Zp-rank of 

St'{F). 

We will use the following notation. Let 

P= n H\Fy,M), P*= U H\Fy,T*) 

L = U Ly, U*= U U*y. 

Then (8) induces a perfect pairing P x P* ^ Q^/Zp, under which L and U* 
are orthogonal complements. Furthermore, wc let 

G = Im (H^Fs/F, M) ^ P) , G* = Im {H^{Fs/F, T*) P*) . 

The duality theorems of Poitou and Tate imply that G and G* are also 
orthogonal complements under the above perfect pairing. Consider the map 

-i:H\Fs/F,M)^ P/L, 

whose kernel is, by definition, Sm{F)- The cokernel of 7 is clearly P/GL. But 
the orthogonal complement of GL under the pairing P x P* ^ Qp/Zp must 
be G* n U*. Thus coker(7) ^ (G* n U*)" . Again by definition, St- (F) is the 
inverse image of [/* under the ma.p H^{Fs/F,T*) -> P*. Thus clearly G*nU* 
is a homomorphic image of St' (F). As we mentioned above, rank2p(5'T* {F)) 
is equal to corank2p(S'Af (^)). On the other hand, since H^{Fy,T*)tors is 
contained in U* for all v ^ S, it follows that 

St* {F)tors = H^{Fs/F,T* ) tors 7 

which in turn is isomorphic to H°{Fs / F, M*)/ H^{Fs / F,M*)ai^. (This last 
assertion follows from the cohomology sequence induced from the exact se- 
quence Q^T* ^V* ^ M* ^ 0.) We denote H^{Fj:/F,M*) = {M*)^" by 
M*{F) as usual. Then, as a Zp-module, wc have 

St'{F) ^ {M*{F)IM*{F)i^) X 2™-"i^^p(^«*(^)). 
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The preceding discussion proves that the Pontryagin dual of the cokernel of 
the map 7 is a homomorphic image of St*{F). In particular, one important 
special case is: if SM*iF) is finite and M*{F) = 0, then coker{'y) = 0. 

We now make the following slightly restrictive hypothesis: M*(F„) = 
H'^{Fy,M*) is finite for at least one v G S. This implies that M*{F) is also 
finite. Consider the following commutative diagram. 

H\Fs/F, M*) H\Fs/F, T*Urs (9) 

H''{F,,M*) H^iF,,T*)tor. 

Since the first vertical arrow is obviously injective, so is the second. Hence the 
map H'^ {Fs / F,T*)ioTs P* is injective. It follows that if 5t*(-F) is finite, 
then 

coker(7) ^ {G* n U*f ^ 5t.(F)^ = H\Fj:/F,T*)tors- 

This last group is isomorphic to M*{F). We obtain the following general 
version of Cassels' theorem. 

Proposition 4.13. Assume that m* = corank^ (ScIm* (-f))- Assume also 
that H'^{Fy, M*) is finite for at least one v G S. Then the cokernel of the 
map 

7 : H\Fs/F,M) ^ [] H\F,,M)/L, 

has 'S.p-corank < m*. Also, 

dimz/pz(coker(7)[p]) < m* + dimz/pz(if°(F, M*[p])). 

7/ TO* = 0, then coker(7) ^ H'^{F, M*)~ . 

It is sometimes useful to know how Im(7) sits inside of P/L. We can 
make the following remark. Let vq be any prime in E for which H^(Fy^^,M*) 
is finite. Assume that Sm* {F) is finite. Then 

lm{^){H\F,,,M)/L,,) = P/L. 

Here H^{Fy^,M)/Ly is a direct factor in P/L. To justify this, one must just 
show that the map 

7' : H\Fs/F,M) ^ JJ H\Fy,M)/Ly 

is surjective under the above assumptions about Sm* (F) and vq. In the above 
arguments, one can study coker(7') by changing L^^ to L'^^ = H^{Fy^,M) 
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and leaving I/„ for ti ^ tig unchanged. Now L'^^ may not be divisible, but 
wc still have cokcr(7') = (G* n U'*)^, where now U*^ has been replaced 
by f/^* = 0. Since U'* C [/*, the corresponding Selmer group S^.{F) is 
still finite. Thus an element a in S^,{F) is in H^{Fs/ F,T*)tois and has the 
property that o-\gp^^ is trivial. But the diagram (9) shows that 

{Fs/F, T*)tors H^{Fyg,T*)tors 

is injective. Hence a is trivial. Thus, S^* (F) is trivial and hence so is coker(7'). 

Cassels' theorem is the following special case of proposition 4.13: M = 
E\p°°], E = any finite set of primes of F containing the primes lying over p or 
DO and the primes where E has bad reduction, and Ly = Im(K„) for all v G E. 
Then T* = Tp{E) by the Weil pairing. Thus M* = E[p°^], L* = Im(K„), and 
Sm-{F) = Sm(F) = ScIe{F)p. It is clear that H"{Fy,M*) is finite for any 
nonarchimedean v G S. Thus, proposition 4.13 implies that 

cokev{H\Fj:/F,En [] H'{F,,En/lm{K,)) ^ E{F); 

if Se\E{F)p is finite. (Of course, as a group, E{F)p = E{F)p.) In the proof 
of lemma 4.6 we need the following case: E is an elliptic curve which we 
assume has (potentially) good, ordinary or multiplicative reduction at all v\p, 
M = ® where s e 2, L„ = Im {H^{Fy,Cy ® k") ^ {F-, , M)) ^.^ 

iiv\p, L„ = if u fP- Then T* = Tp{E) (g) k-" , M* = E[p°°](g) k-"" , and L* is 
defined just as Ly. Assuming that ScIe{Foc)p is /l-cotorsion, we can choose 
s G Z so that Sm' (F) is finite. The hypothesis that H"{Fy,M*) is finite for 
some V G S is also easily satisfied (possibly avoiding one value of s). Then 
the cokernel of the map 7 will be isomorphic to the finite group H^{F, M*) . 
We can now prove the following generalization of proposition 4.8. 

Proposition 4.14. Assume that E is an elliptic curve defined over F and 
that Se\E{Foo)p is A-cotorsion. Assume that E{F)p = 0. Then Se\E{Foo)p 
has no proper A-submodules of finite index. 

Proof. As in the proof of lemma 4.6, we will use the twisted Galois modules 
As = E\p°°]0{k^), where s e 2. Since E{F)p = 0, it follows that E{F^)p = 
too. (One uses the fact that 7^ is pro-p.) Since Ag = E[p°°] as G^?^ -modules, 
it is clear that H°{F, Ag ) = for all s. Now E must have potentially ordinary 
or multiplicative reduction at all v\p, since we are assuming that Self;(-F'oo)p 
is ^-cotorsion. So we can define a Selmer group Sa, (K) for any algebraic 
extension K of F. If we take if to be a subfield of Fs, then Sa,{K) is the 
kernel of a map {Fs /K,As) — > {Ag ,K), where this last group is defined 
in a way analogous to Ve{K). As we pointed out in the proof of lemma 4.6, 
we have 



SAAFoo) = Se\E{F^)p®{iin 
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as yl-modules. We also have ^^(^^,^00) = V§{F^) (g) (k*) as yl- modules. 
The hypothesis that Sel£;(Foo)p is yl-cotorsion implies that SaS^od)^ , and 
hence Sas{F), will be finite for all but finitely many values of s. (We will 
add another requirement on s below.) We let M = Ag, where s € Z has been 
chosen so that Sa_s{F) is finite. Note that M* = As- Since Sm*{F) is finite 
and M*(F) = 0, we can conclude that the map 

j:H\Fj:/F,M)^r^{M,F) 

is surjective. Since F has cohomological dimension 1, the restriction maps 

H^{Fs/F,M) H^{Fs/F.^,My and V^{M,F) V^{M,F^Y are both 
surjective. Hence it follows that the map 

H\Fs/F^,Mf ^ P^{M,F^f 

must be surjective. We have the exact sequence defining Sm{Foo)- 

^ SMiFoo) ^ H\Fj:/F^,M) ^ V''{M,F^) ^ 0. 

This is just the exact sequence defining Se\E{F^)p, twisted by k^. The cor- 
responding cohomology sequence induces an injective map 

SM{Fo.)r ^ H\Fs/F^,M)r. 

If we let Q = H\Fs/F^,E[p'=^])/H\Fs/F^,E[p°^])A-div, as before, then 

H\Fj:/F^,M)r^{Q(^{K'))r 

and, since Q is yl-cotorsion, we can choose s so that {Q (g) {K'^))r is fi- 
nite. (This will be true for all but finitely many values of .s.) But since 
H^{Fs/Foc, E[p°^]) has no proper yl-submodules of finite index, neither does 
H\Fs/Foc,M). It follows that, for suitably chosen s, H'^{Fe / F^, M)r = 0. 
Hence SM{Foc)r = 0. This implies that Sm{Fx) has no proper yl-submodules 
of finite index, from which proposition 4.14 follows. ■ 

We will give two other sufficient conditions for the nonexistence of proper 
yl-submodules of finite index in Se\E{Foo)p- We want to mention that a rather 
different proof of proposition 4.14 and part of the following proposition has 
been found by Hashimori and Matsuno [HaMa] . This proof is based on the 
Cassels-Tate pairing for IH£;(F„)p. This topic will be pursued much more 
generally in [Gr6] . 

Proposition 4.15. Assume that E is an elliptic curve defined over F and 
that Sc\e{Foc)p is A-cotorsion. Assume that at least one of the following two 

hypotheses holds: 

(i) there is a prime vq of F, vq \p, where E has additive reduction. 
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(ii) there exists a prime vq of F, vo\p, such that the ramification index Cy^ 
of Fyg/(£lp satisfies ey„ < p — 2 and such that E has good, ordinary or 
multiplicative reduction at vq. 

Then Sel£;(Foo)p has no proper A-submodules of finite index. 

Remark. If condition (i) holds, then H'^{I^^^ , E[p°°]) is finite. This group will 
be zero if p > 5. Then E{F)p = and we are in the situation of proposition 
4.14. 

Proof. Wc will modify the proof of proposition 4.14. In addition to the 
requirements on M = occurring in that proof, we also require that 
H^{Fyg,M*) be finite, which is true for all but finitely many values of s e 2. 
Here vq is the prime of F satisfying (i) or (ii). (If E has additive reduction 
at VQ, Vq f p, then this holds for all s.) Assume first that (i) holds. In this 
case, let S'j^{F), S'j^{F^) denote the Selmer groups where one omits the local 
condition at vq (or the primes above VQ).li rj is a, prime of Foe lying over vq, 
then H°{{Foo)n,M*) is finite. This implies that H^{{Foc\,M) = 0. Thus, 
S'm{Foo) = Sm{Foo)- The remark following proposition 4.13 shows that the 
map 

y : H\Fs/F,M) ^ V^'{M,F) 

is surjective, where S' = S — {vq} and V^'{M,F) is the product over 

all primes of E'. The proof then shows that S'^^(-F'oc) has no proper A- 
submodules of finite index. This obviously gives the same statement for 
SelB(Foo)p. 

Now assume (ii). We again define S'jyj{Foc) by omitting the local condition 
at all primes rj of Fqo lying over vq. Just as above, we see that 5*^(^00) has no 
proper yl-submodules of finite index. Thus, the same is true for Sel^(Foo)p. 
By lemma 4.6, we see that 

Se4(F^)p/SelB(F^)p - l[HE{{Foo)r,). 

rilvo 

But He{{Foo)„) = FH(^oo)r„F[p°°])/Im(K^) ^ H\{F^\,D,^) by propo- 
sition 2.4 and the analogous statement proved in section 2 for the case 
where E has multiplicative reduction at v. Here D^^ = i?[p°°]/C„o is an 
unramified Gi?^^ -module isomorphic to Qp/2p. We can use a remark made 
in section 2 (preceding proposition 2.4) to conclude that H^{{Foo)rnF)va) 
is Zp[[Gal((Foo)r;/FuQ)]]-cofree. Proposition 4.15 in case (ii) is then a con- 
sequence of the following fact about finitely generated yl-modules: Suppose 
that X' is a finitely generated A-module which has no nonzero, finite A- 
submodules. Assume that Y is a, free A-submodule of X' . Then X = X'/Y 
has no nonzero, finite A-submodules. The proof is quite easy. By induction, 
one can assume that Y = A. Suppose that X does have a nonzero, finite 
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yl-submodule. Then Y C Yq, where [Yq : Y] < oo, Y =^ Yq, and Yq is a A- 
submodule of X'. Then Yq is pseudo-isomorphic to A and has no nonzero, 
finite yl-submodules. Hence Yq would be isomorphic to a submodule of A of 
finite index. It would follow that A contains a proper ideal of finite index 
which is isomorphic to A, i.e., a principal ideal. But if / G A. then (/) can't 
have finite index unless / e yl^ , in which case (/) = A. Hence in fact X has 
no nonzero, finite yl-submodules. 

5. Conclusion. 

In this final section we will discuss the structure of Sel£;(Foo)p in various 
special cases, making full use of the results of sections 3 and 4. In particular, 
we will see that each of the invariants ij,e, A^~^, and can be positive. 
We will assume (usually) that the base field F is Q and that E/(Q, has good, 
ordinary reduction at p. Our examples will be based on the predicted order 
of the Shafarevich-Tate groups given in Cremona's tables. In principle, these 
orders can be verified by using results of Kolyvagin. 

We start with the following corollary to proposition 3.8. 

Proposition 5.1. Assume that E is an elliptic curve/<^ and that both i?((Q) 

and IIl£;(Q) are finite. Letp vary over the primes where E has good, ordinary 
reduction. Then SelE{^ac)p = except for p in a set of primes of zero density. 
This set of primes is finite if E is (S^-isogenous to an elliptic curve E' such 
that \E'{(Sl)\ > 1. 

Remark. Recall that if p is a prime where E has supersingular (or potentially 

supcrsingular) reduction, then Sel£;(Qoo)p has positive /1-corank. Under the 
hypothesis that -E(Q) and ni£;(Q) are finite, this yl-corank can be shown to 
equal 1, agreeing with the conjecture stated after theorem 1.7. If E doesn't 
have complex multiplication, the set of supersingular primes for E also has 
zero density. 

Proof. We are assuming that Scl£;((Q) is finite. Thus, excluding finitely many 

primes, we can assume that SelB(Q)p = 0. If we also exclude the finite set 

of primes dividing Y{ci, where / varies over the primes where E has bad 
I 

reduction and c; is the corresponding Tamagawa factor, then hypotheses (ii) 
and (iii) in proposition 3.8 are satisfied. As for hypothesis (i), it is equivalent 
to ttp = l(mod p), where ap = \ + p — |ii^(lFp)|. Now we have Hassc's result 
that jflpl < 2^ and hence Op = l(mod p) ^ Op — 1 li p > b. By using 
the Chebotarev Density Theorem, one can show that {p \ ttp = 1} has zero 
density. (That is, the cardinality of {p | ftp = l,p < x\ is o(x/log(x)) as 
X oo.) The argument is a standard one, using the l-adic representation 
attached to E for any fixed prime /. The trace of a Frobenius element for 
p (t^ I) is Up. One considers separately the cases where E does or does not 
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have complex multiplication. For the non-CM case, see [Sel], IV-13, exercise 
1. These remarks show that the hypotheses in proposition 3.8 hold if p is 
outside a set of primes of zero density. For such p, SelB(Q(^)p = 0. The final 
part of proposition 5.1 follows from the next lemma. 

Lemma 5.2. Suppose that E is an elliptic curve defined over Q and that p 
is a prime where E has good reduction. If E{<Sl) has a point of order 2 and 

p> 5, then ap ^ l(mod p). If E is ^-isogenous to an elliptic curve E' such 
that -E'(Q)tors has a subgroup of order q > 2 and if p \ q, then Op ^ l(mod p). 

Proof. Q-isogcnous elliptic curves have the same set of primes of bad reduc- 
tion. If E has good reduction at p, then the prime-to-p part of i5'(Q)tors maps 
injectively into E'{Wp), which has the same order as E{Wp). For the first part, 
ap = l(mod p) implies that 2p divides |i?(IFp)|. Hence 2p < 1 + p + 2^, 
which is impossible for p > 5. For the second part, if Op = l(mod p) and p\ q, 
then qp divides |£'(Fp)|. Hence qp < 1 + p + 2y^, which again is impossible 
since q > 2. 

Here are several specific examples. 

E = Xo(ll). The equation y^+y = a;^— a;^ — 10a;— 20 defines this curve, which 

is ll(Al) in [Crc]. E has split, multiplicative reduction at p = 11 and good 
reduction at all other primes. We have ordii(j£;) = —5, i?(Q) = Z/5Z, and 
we will assume that Self;(Q) = as predicted. If p ^ 11, then Cp = l(mod p) 
happens only for p = 5. Therefore, if E has good, ordinary reduction at p 7^ 5, 
then SelB(Qo^)p = according to proposition 3.8. We will discuss the case 
p = 5 later, showing that SelB(Qoo)p — Hom(yl/pyl, Z/pZ) and hence that 
He = 1, = 0. We just mention now that, by theorem 4.1, /e(0) ^ 5. We 
will also discuss quite completely the other two elliptic curves/ (Q of conductor 
11 for the casep = 5. If p = 11, then SelB(Qoo)p = 0- This is verified in [GrS], 
example 3. 

E = Xo(32). This ciuvc is defined by = - 4.t and is 32(A1) in [Crc]. It 
has complex multiplication by Z [i] . E has potentially supersingular reduction 
at 2. For an odd prime p, E has good, ordinary reduction at p if and only if 
p = l(mod 4). We have £'(Q) = Z/4Z, mij(Q) = (as verified in Rubin's 
article in this volume), and C2 = 4. By lemma 5.2, there are no anomalous 
primes for E. Therefore, Sel£;(QQ^)p = for all primes p where E has good, 
ordinary reduction. 

El : y2 = + - 7x + 5 and E2 : y^ x^ + x^ - 647x - 6555. Both of 
these curves have conductor 768. They are 768(D1) and 768(D3) in [Cre]. 
They are related by a 5-isogcny defined over (Q. We will assume that Sel^;^ (Q) 
is trivial as predicted by the Birch and Swinnerton-Dyer conjecture. This 
implies that Sel£;2(Q)p = for all primes p 7^ 5. We will verify later that 
this is true for p = 5 too. Both curves have additive reduction at p = 2, and 
split, multiplicative reduction at p = 3. For Ei, the Tamagawa factors are 
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C2 = 2, C3 = 1. For E2, they are C2 = 2, C3 = 5. We have Ei{€l) ^ Z/2Z ^ 
-E'2(Q)- By lemma 5.2, no prime p > 5 is anomalous for Ei or £'2. If Ei 
(and hence i?2) have ordinary reduction at a prime p > 5, then proposition 
3.8 implies that Sel£;j(QgQ)p = = Sel£;2(Qo^)p. Both of these curves have 
good, ordinary reduction at p = 5. (In fact, Ei = E2 : = + + 3x 
and one finds 4 points. That is, 05 = 2 and so p = 5 is not anomalous 
for El or E2.) The hypotheses of proposition 3.8 are satisfied for Ei and 
p = 5. Hence Selsi (Qoo)5 = 0- ^^t, by using either the results of section 3 or 
theorem 4.1, one sees that SelE2((QoQ)5 ^ 0. (One can either point out that 
coker(Sel£;2(Q)5 Sel£;2(Q;^)5 ) is nonzero or that fE2{0) ~ 5. We remark 
that proposition 4.8 tells us that Self;2(Qoo) cannot just be finite if it is 
nonzero.) Now if (/) : i?i ^ £'2 is a 5-isogeny defined over Q, the induced map 
: Sel£;^(QQ^)5 Sel£;2(Qoo)5 will have kernel and cokernel of exponent 5. 
Hence = ^Ei = (for p = 5). Since jE-ii^) ^ 5, it is clear that 1XE2 = 1- 
Below we will verify directly that Sel£;2(Qoc)5 - Hom(yl/5yl, Z/5Z). Note 
that this example illustrates conjecture 1.11. 

E : y2 + y = + - 12x - 21. This is 67(A1) in [Cre]. It has split, mul- 
tiplicative reduction at p = 67, good reduction at all other primes. We have 
£(Q) = and cey = 1. It should be true that Sel£;((Q) — 0, which we will 
assume. According to proposition 3.8, Sel£;(QoQ)p = for any prime p 7^ 67 
where ^ 0, l(mod p). If Op = O(mod p), then E has supersingular re- 
duction at p, and hence Sel£;((Qoo)p is not even Tl-cotorsion. (In fact, the 
yl-corank will be 1.) If Op = l(mod p), then Sc1£;((Qqq)p must be nonzero and 
hence infinite. (Proposition 4.8 applies.) By proposition 4.1, we in fact have 
/£;(0) ~ |iJ(Fp)p ~ p^ for any such prime p. (Here we use Basse's estimate 
on |£(Fp)|, noting that 1 + p + 2^ < p^ for p > 3. The prime p = 2 is 
supersingular for this elliptic curve.) Now it seems reasonable to expect that 
E has infinitely many anomalous primes. The first such p is p = 3 (and the 
only such p < 100). Conjecture 1.11 implies that he = 0. Assuming this, we 
wiU later see that A^''^ = and \^ = 2. 

E : + y = - x^ - 460x - 11577. This curve has conductor 915. It is 
915(A1) in [Cre]. It has split, multiplicative reduction at 5 and 61, nonsplit 
at 3. We have C3 = cgi = 1 and C5 = 7. SelE(Q) = 0, conjecturally. i?((Q) — 0. 
Proposition 3.8 implies that Sel_E(Qoo)p = fo'^ s-i^y prime p where E has 
good, ordinary reduction, unless either p = 7 or Up = l(mod p). In these two 
cases, Sel£;((Qoo)p must be infinite by proposition 4.8. More precisely, theorem 
4.1 implies the following: Let p = 7. Then /£;(0) ~ 7. (One must note that 
ay = 3 ^ l(mod 7).) This implies that fsiT) is an irreducible element of A. 
On the other hand, suppose a.p = l(mod p) but p ^ 5 or 61. Then fE{0) ~ P^ 
The only such anomalous prime p < 100 is p = 43. Assuming the validity 
of conjecture 1.11 for E, we will see later that X^'^ = and A™ = 2 for 
p = 43. 
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E : y2 + xy = - 3x + 1. This is 34(A1) in [Cre]. Sel£;(Q) should be trivial. 
E has multiplicative reduction at 2 and 17, C2 = 6, C17 = 1. Also, E{(^) = 
Z/62. The primep = 3 is anomalous: = —2 and so |i?(F3)| = 6.lip is any 
other prime where E has good, ordinary reduction, then ap ^ l(mod p) and 
we clearly have Sel£;(Qoo)p = 0- For p = 3, proposition 4.1 gives /e(0) ~ 3. 
Thus, fsiT) is irreducible. Let F be the first layer of the cyclotomic Z3- 
extension of Q. Then F = Q(/3), where P — + C^^, C denoting a primitive 
9-th root of unity. Notice that (3 is a root of — 3a: + 1. Thus — /3) 
is a point in E{F), which is not in £^(Q). Now the residue field for (Q^^ 
at the unique prime 77 above 3 is JF3. The prime-to-3 torsion of E{^^) is 
mapped by reduction modulo r] injectively into ^^(Fs), and thus is Z/2Z. 
It is defined over Q. The discussion preceding proposition 3.9 shows that 
i;(Q^)3 = i;(Q)3. Thus, ^(Q<^)tors = £^(Q)tors- It follows that (/3,-/3) 
has infinite order. Now Gal(F/Q) acts faithfully on E{F) (g) Q3. It is clear 
that this Q3-representation must be isomorphic to where p is the unique 
2-dimensional irreducible Qg-representation of Gal(i^/Q) and f > 1. If 7 
generates F = Gal(Q;^/Q) topologically, then /o(7|f) is given by a matrix 
with trace —1, determinant 1. Regarding p as a representation of F and 
letting T = 7 — 1, p{j — 1) has characteristic polynomial 

6»i = (1 + r)2 + (1 + T) + 1 = + 3T + 3. 

Since E{F) O (Q3/Z3) is a yl-submodule of Seli=;(Q^)3, it follows that 9[ 
divides fsiT). Comparing the valuation of ^i(O) and /b(0), we clearly have 
t = 1 and fsiT) = 6I1, up to a factor in A"" . Therefore A^"'^ = 2, = 0, 
and pe = 0- 

When is Sel£;(Qoo)j> infinite? A fairly complete answer is given by the 
following partial converse to proposition 3.8. 

Proposition 5.3. Assume that E has good, ordinary reduction atp and that 
ii^(Q) has no element of order p. Assume also that at least one of the following 

statements is true: 

(i) Scl£(Q)p ^ 0. 

(ii) a-p = l(mod p). 

(iii) there exists at least one prime I where E has multiplicative reduction 
such that ai = l(mod p) and ordi{jE) = O(mod p). 

(iv) there exists at least one prime I where E has additive reduction such 
that E[<^i) has a point of order p. 

Then Sel£;((Qg^)p is infinite. 

Remark. If E has multiplicative reduction at I, then a; = ±1. Thus, in (iii), 
a/ = 1 (mod p) is always true if p = 2 and is equivalent to a; = 1 if p is odd. 
Also, (iii) and (iv) simply state that there exists an I such that p|c/. If E has 
additive reduction at I, then the only possible prime factors of c; are 2, 3, or 
I. Since E has good reduction at p, (iv) can only occur for p = 2 or 3. 
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Proof. If Sel£;(Q)p is infinite, the conclusion follows from theorem 1.2, or more 
simply from lemma 3.1. If Sel£;((Q)p is finite, then we can apply proposition 
4.1 to say that /b(0) is not in 2^. Hence fsiT) is not invertible and so 
Xe{^oo) must indeed be infinite. (The characteristic ideal of a finite A- 
module is A.) Alternatively, one can point out that since -E(Q)p = 0, it 
follows that ker(/io) = and Q§ (Q) — (Q), where S consists of p, oo, and 
all primes of bad reduction. Hence, if (i) holds, then Sel£;((QoQ)p ^ 0. If (ii), 
(iii), or (iv) holds, then kcr((7o) 7^ 0. Therefore, since ker(ft,o) and coker(/io) 
are both zero, we have coker(so) 0. This implies again that Sel£;(QoQ)j, 0. 
Finally, proposition 4.8 then shows that Sel£;((Q3^)p must be infinite. ■ 

As our examples show, quite a variety of possibilities for the data going 
into theorem 4.1 can arise. This is made even more clear from the following 
observation, where is a variant on lemma 8.19 of [Mazl]. 

Proposition 5.4. Let P and L he disjoint, finite sets of primes. Let Q he 

any finite set of primes. For each p € P, let a* be any integer satisfying 
\a*\ < 2y/p. For each I G L, let a^* = +1 or -1. If a'^ = +1, let c^ be any 
positive integer. If = —1, let cf = 1 or 2. Then there exist infinitely many 
non-isomorphic elliptic curves E defined over Q such that 

(i) For each p E P, E has good reduction at p and Op = a*. 

(ii) For each I £ L, E has multiplicative reduction at I, ai = a^*, and 
ci = q*. 

(iii) For each q G Q, E[q] is irreducible as a Wq-representation space of 
Gq. 

Proof. This is an application of the Chinese Remainder Theorem. For each 
p G P, a theorem of Dcuring states that an elliptic curve Ep defined over 
Fp exists such that |ii^p(Fp)| = 1 + p — a*. One can then choose arbitrarily 

a lifting E* of Ep defined by a Weierstrass equation (as described in Tate's 
article [Ta]). We write this equation as f*{x,y) = where f*{x, y) E 2p[a;, y]. 
Let I e L. If a;* = +1, we let Ei denote the Tate curve over Q; with j^* = 
l~'^i . Then Ef has split, multiplicative reduction at I and ordi(jE) = — c*. 
If a* = —1, then wc instead take E* as the unramificd quadratic twist of 
this Tate curve, so that Ei has non-split, multiplicative reduction. The index 
[E*{<^l) : EfQ{<^i)] is then 1 or 2, depending on the parity of c*. In either 
case, we let f*{x,y) = be a Weierstrass equation for E* , where f*{x,y) G 
^i[x,y]. Let q £ Q. Then we can choose a prime r = rq ^ q and an elliptic 
curve Er defined over Wr such that Er[q\ is irreducible for the action of 
GiF^. If ? = 2, this is easy. We take r to be an odd prime and define Er 
by — 5(2^): where g(x) € Fr[x] is an irreducible cubic polynomial. Then 
Er{Wr) has no element of order of 2, which suffices. If q is odd, we choose 
r to be an odd prime such that — r is a quadratic nonresidue mod q. We 
can choose E/Wj. to be supersingular. Then the action of Frob^ e Gw^ on 
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Er[q] has characteristic polynomial + r. Since this has no roots in F,, 
Er[q\ indeed has no proper invariant subspaces under the action of Probr- 

We can choose a lifting E* of Er defined over Q,. by a Weierstrass equation 
f*{x,y) = 0, where f*{x,y) € '2.r[x,y]. For each q ^ Q, infinitely many 
suitable r^'s exist. Hence we can also require that the r^'s are distinct and 
outside of POL. We let R = {rq},iech choosing one Vq for each q G Q. We then 
choose an equation f{x,y) = in Weierstrass form, where f{x,y) € '2.[x,y] 
and satisfies f{x, y) = f^{x, y) (mod m*"*) for all m e P U i U R, where tm 
is chosen sufficiently large. The equation f{x, y) = determines an elliptic 
curve defined over Q. If p S P, we just take tp = I. Then E has good 
reduction at p, E = Ep, and hence Q,p — dp , cLS desired. If r G R, then r = Vg 

for some q G Q. We take tr = 1 again. E has good reduction at r, E ~ Er, 
and hence the action of a Frobenius automorphism in Gal(Q(_E[(jf])/Q) (for 
any prime above r) on E[q] has no invariant subspaces. Hence obviously E[q] 
is irreducible as an IFg-representation space of Gq. Finally, suppose I € L. 
If we take t; sufiiciently large, then clearly Je will be close enough to Je* to 
guarantee that ordi(j_E) = ord;(j£;*) = — q*. In terms of the coefficients of a 
Weierstrass equation over 2;, there is a simple criterion for an elliptic curve 
to have split or nonsplit reduction at I. (It involves the coset in Qf /(Qj^)^ 
containing the quantity —a/cQ in the notation of Tate.) Hence it is clear that 
E will have multiplicative reduction at / and that a/ = if ti is taken large 
enough. Thus E will have the required properties. The fact that infinitely 
many non-isomorphic E^s exist is clear, since we can vary L and thus the set 
of primes where E has bad reduction. ■ 

Remark. We can assume that P U L contains 3 and 5. Any elliptic curve E 
defined over Q and satisfying (i) and (ii) will be semistable at 3 and 5 and 
therefore will be modular. This follows from a theorem of Diamond [D]. Fur- 
thermore, let E4 denote the quadratic twist of E by some square-free integer 
d. If we assume that all primes in PUi split in Q(v^), then Ed also satisfies 
(i), (ii), and (iii). One can choose such d so that L{Ed/^, f ) 7^ 0. (See [B-F-H] 
for a discussion of this result which was first proved by Waldspurger.) A theo- 
rem of Kolyvagin then would imply that Ed (Q) and IH_e^ (Q) are finite. Thus, 
there in fact exist infinitely many non-isomorphic modular elliptic curves E 
satisfying (i), (ii), and (iii) and such that Sel£;((IJ) is finite. 

Corollary 5.5. Let P he any finite set of primes. Then there exist infinitely 

many elliptic curves -E/Q such that E has good, ordinary reduction at p, 
ttp = 1, and E\p\ is an irreducible Wp-representation space for Gq, for all 
peP. 

Proof. This follows immediately from proposition 5.9. One takes P = Q, 
a* = 1 for all p G P, and L = (p. 
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Corollary 5.6. Let p be any prime. Assume that conjecture 1.11 is true 
when F = Q. Then \e is unbounded as E varies over elliptic curves defined 
over Q with good, ordinary reduction at p. 

Proof. Take P = {p} = Q. Let a* be such that p a*. Take L to be a 
large finite set of primes. For each I G L, let — +1, C;* = p. Let i?/Q be 
any elliptic curve satisfying the statements in proposition 5.4. As remarked 
above, we can assume E is modular. Now E has good, ordinary reduction 
at p. According to Theorem 1.5, SelB(Qoo)p is yl-cotorsion. (Alternatively, 
we could assume that Sel£;(Q)p is finite and then use theorem 1.4. The rest 
of this proof becomes somewhat easier if we make this assumption on E.) 
Also /xb = by conjecture 1.11. We will show that A^; > \L\, which certainly 
implies the corollary. Let t = \L\. Let n = corank2p(Sel£;((Q)p). Of course, 
Xe > nhy theorem 1.2. So we can assume now that n < t. Let S be the set of 
primes p, oo, and all primes where E has bad reduction. Then, by proposition 
4.13, there are at most elements of order p in 'Pe(Q)/5e(Q)- Also, for 
each I € L, wc have | ker(r()| = ci = p. Thus, the kernel of the restriction map 
^b(Q) ^b(Qoo) contains a subgroup isomorphic to i^/pW-Y. It follows 
that ker(g(o) contains a subgroup isomorphic to (2/pZ)*'". Now ker(/io) = 
cokcr(/io) ~ 0. Thus it follows that coker(so) contains a subgroup isomorphic 
to (Z/f^Z)*"". By proposition 4.14, and the assumption that he = 0, we have 

Seli<;(Q^)p-(Qp/Zp)^-. 

But SelB(Qoo)p contains a subgroup Im(so)div isomorphic to (Qp/Zp)" and 
the corresponding quotient has a subgroup isomorphic to (Z/pZ)*"". It fol- 
lows that \e > as we claimed. I 

Remark. If we don't assume conjecture 1.11, then one still gets the weaker re- 
sult that \e + fJ'E is unbounded as E varies over modular elliptic curves with 
good, ordinary reduction at a fixed prime p. For the above argument shows 
that dimyi/i„yi(^B(Qoo)/™^B(Qoo)) i^ unbounded, where m denotes the 
maximal ideal of A. We then use the following result about Tl-modules: Sup- 
pose X is a finitely generated, torsion A-module and that X has no nonzero, 
finite A-submodules. Let A and ji denote the corresponding invariants. Then 

\ + li> dim^/m^(X/mX). 

The proof is not difficult. One first notes that the right-hand side, which is 
just the minimal number of generators of X as a /1-module, is "sub-additive" 
in an exact sequence ^ ^ X2 ^ — > of /1-modules. Both A and 
fi are additive. One then reduces to the special cases where either (a) X has 
exponent p and has no finite, nonzero yl-submodule or (b) X has no Zp- 
torsion. In the first case, X is a (/l/pyl)-module. One then uses the fact that 
A/pA is a FID. In the second case, A is the minimal number of generators of 
X as a Zp-module. The inequality is clear. 
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We will now discuss the /U-invariant he of Sel£;((Qoo)p. We always assume 
that E is defined over Q and has either good, ordinary or multiplicative 
reduction at p. According to conjecture 1.11, we should have /Us = if 
is irreducible as a Gq-module. Unfortunately, it seems very difficult to veriiy 
this even for specific examples. In this discussion we will assume that E\p] 
is reducible as a GQ-module, i.e., that E admits a cyclic Q-isogeny of degree 
p. In [Maz2], Mazur proves that this can happen only for a certain small 
set of primes p. With the above restriction on the reduction type of E at p, 
then p is limited to the set {2, 3, 5, 7, 13, 37}. For p = 2, 3, 5, 7, or 13, there 
are infinitely many possible E^s, even up to quadratic twists. For p = 37, E 
must be the elliptic curve defined hy y'^ + xy + y = + x'^ — 8x + 6 (which 
has conductor 35^) or another elliptic curve related to this by a Q-isogeny of 
degree 37, up to a quadratic twist. 

Assume at first that E[p] contains a Goj-invariant subgroup <P isomorphic 
to fj,p. We will let S be the finite set consisting of p, oo, and all primes where 
E has bad reduction. Then we have a natural map 

It is easy to verify that ker(e) is finite. We also have the Kummer homomor- 
phism 

where Uoo denotes the unit group of Qg^- The map /3 is injcctive. Dirichlet's 
unit theorem implies that the (yl/pyl) -module Z//oo/Z^^ has corank 1. Consider 
a prime I ^ p. Let ?7 be a prime of Q^o lying over I. Then (Qoo),, is the 
unramified Zp-cxtcnsion of Q; (which is the only 2p-cxtcnsion of (Qj). All 
units of (Qoo)') p-th powers. Thus, if u G Uoo, then it is a p-th power 
in (Qoo)!?- Therefore, if e Im(/3), then ipla^s^^-, is trivial. If we fix an 
isomorphism <P = (ip, then it follows that the elements of Im(eo 0) satisfy the 
local conditions defining SelB(QoQ)p at all primes rj of Q^^ not lying over p or 
oo. Now assume that p is odd. We can then ignore the archimedean primes 
of Qo^j. Since the inertia subgroup /q^ acts nontrivially on yUp (because p is 
odd) and acts trivially on E[p°°]ICp, it follows that C Cp. If tt denotes the 
unique prime of lying over p, recall that Im(fi;^) = Im(A^), where A,r is 
the map 

HH{<^o^)^,Cp)^H\{<^^)^,En. 

Therefore, it is obvious that if G Im(e), then <p|g(q ) G Im(K^). Combining 
the above observations, it follows that Im(e o /?) C Sel£;(Qoo)p if P is odd. 
Thus, Scl£;(Qg^)p contains a yl-submodulo of exponent p with (yl/pyl)- corank 
equal to 1, which implies that either jiE ^ 1 or Sel£;({Q^)j, is not yl-cotorsion. 

We will prove a more general result. Suppose that E\p°°] has a Gq- 
invariant subgroup # which is cyclic of order p^, with m > 1. If has 
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semistable reduction at p, then it actually follows that E has either good, 
ordinary reduction or multiplicative reduction at p. <P has a (jQ-composition 
series with composition factors isomorphic to 'P[p\. We assume again that p is 
an odd prime. Then the action of /q^ on (I>[p\ is either trivial or given by the 
Teichmiiller character w. In the first case, is isomorphic as a Gq^ -module 
to a subgroup of i?[p°°]/Cp. The action of /q^ on ^ is trivial and so we say 
that $ is unramified at p. In the second case, we have $ Cp and we say 
that # is ramified at p. The action of Gal(C/]R) on determines its action 
on ^. We say that is even or odd, depending on whether the action of 
Gal(C/]R) is trivial or nontrivial. With this terminology, we can state the 
following result. 

Proposition 5.7. Assume that p is odd and that E is an elliptic curve/(^ 

with good, ordinary or multiplicative reduction at p. Assume thai ScIe{^oo)p 
is A-cotorsion. Assume also that E\p°°] contains a cyclic G^-invariant sub- 
group $ of order which is ramified at p and odd. Then he > m. 

Proof. We will show that Sel^ ((Qq^)j, contains a yl-submodule pseudo-isomorphic 
to Consider the map 

The kernel is finite. Let I G E, I ^ p or oo. There are just finitely many 
primes 77 of (Qq^ lying over I. For each rj, H^{{(Il^),^,<P) is finite. (An easy 
way to verify this is to note that any Sylow pro-p subgroup V of G(q^)^ is 
isomorphic to 2p and that the restriction map if ^((Q,^),,, H^{V,^) is 
injective.) Therefore 

has finite index in i7^({Q^/{Qg^,<?). On the other hand, C Cp. Hence, 
elements in Im(e) automatically satisfy the local condition at tt occurring in 
the definition of Sel^CQoo)?- These remarks imply that Im(e) fl SelE(Q(^)p 
has finite index in Im(e) and therefore Self;(QoQ)p contains a yl-submodule 
pseudo-isomorphic to if^(Qx'/(QoQ, ^). 

One can study the structure of H^{(S^j^/<^^), ^) either by restriction to a 
subgroup of finite index in Gal((Q^/(Q3^) which acts trivially on <P or by using 
Euler characteristics. We will sketch the second approach. The restriction 
map 

is surjective and its kernel is finite and has bounded order as n ^ 00. The 
Euler characteristic of the Gal(Q2;/Q„)-module is H 1^^/^^" T^, where v 

v\oo 
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runs over the infinite primes of the totaUy real field Q„ and Dy = G(q^)^. 
By assumption, f?^" = and hence this Euler characteristic is p~™P" for 
all n > 0. Therefore, ^) has order divisible by It follows 

that the yl-module -ff^(Q2;/Qoo>^)> which is of exponent and hence cer- 
tainly yl-cotorsion, must have /^-invariant > m. This suffices to prove that 
fXE > m. Under the assumptions that E[p\ is reducible as a Gq-module 
and that Sel£;(Qo<3)p is yl-cotorsion, it follows from the next proposition 
that SelE(Qoo)p contains a yl-submodule pseudo-isomorphic to and 
that the corresponding quotient has finite 2p-corank. Also, Im(e) must al- 
most coincide with if^(Q^/Q(^, (That is, the intersection of the 
two groups must have finite index in both.) This last Tl- module is pseudo- 
isomorphic to according to the proposition below. 

If E is any elliptic curve/(Q and p is any prime, the weak Leopoldt conjec- 
ture would imply that i?^(Q^/Qoo, has yl-corank equal to 1. That is, 
-f^^(Qi;/Qcoi -^b°°])^-div should be pseudo-isomorphic to A. (This has been 
proven by Kato if E is modular.) Here we will prove a somewhat more pre- 
cise statement under the assumption that E\p] is reducible as a Gq-module. 
It will be a rather simple consequence of the Ferrero- Washington theorem 
mentioned in the introduction. As usual, Z' is a finite set of primes of Q 
containing p, oo, and all primes where E has bad reduction. 

Proposition 5.8. Assume thatE is an elliptic curve defined over Q and that 

E admits a ^-isogeny of degree p for some prime p. Then (Q^ /Qoo i E[P°°]) 
has A-corank 1. Furthermore, iJi(Q£/Q^, £;[p°°])/i?i(Q^/Q<^, £;[p~])A-div 
has fi-invariant equal to if p is odd. If p = 2, this quotient has fx-invariant 
equal to or 1, depending on whether E{M) has 1 or 2 connected components. 

Proof. First assume that p is odd. Then we have an exact sequence 

Q^$^E\p]^^ 

where Gal(Q / Q) acts on the cyclic groups ^ and ^ of order p by characters 
V : Gal(Q^/Q) ^ (Z/pZ)^. We know that H^{<^s/<Sl^,E\p'^]) has yl- 
corank > 1. Also, the exact sequence 

^ E[p] ^ E[p°^] ^ E[p°°] ^ 

induces a surjective map fZ"i(Q^/Q^, E[p]) ^ ifi(Q^/Q^,, Sb°°])[p] with 
finite kernel. Thus, it clearly is sufficient to prove that if^((Q^/(Qo2, i?[p]) has 
(yl/pyl)-corank 1. Now the determinant of the action of Gq on E[p] is the 
Teichmiiller character uj. Hence, ipij) = u. Since cj is an odd character, one 
of the characters ly? or ^ is odd, the other even. We have the following exact 
sequence: 

if'(Qi:/Qoo,^) - H\(^j,/(^^,E\p]) ^ H\(^j,/(^^,^) 

and hence proposition 5.8 (for odd primes p) is a consequence of the following 
lemma. 
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Lemma 5.9. Let p be any prime. Let G be a Gal{(^^/(£l) -module which is 
cyclic of order p. Then H^{(S^^/^^),0) has {A/pA)-corank 1 if is odd or 
if p = 2. Otherwise, iJ^(Q^/Qoo! ®) finite. If p = 2, then the map 

is surjective and has finite kernel. Here VQ°\^^)=lAm. Y\ H^{{^n)vnT^)- 

n ' Vn\oo 

Remark. We will use a similar notation to that introduced in the remark 

following lemma 4.6. For example, 'P^'*(Qoo), which occurs in the following 
proof, is defined as Lim Yl H^{{(!),^)v^,C). If is a nonarchimedean prime, 

then Pc\^oo) — n -^^((Qcx))»)' since there are only finitely many primes 

ri\i 

77 of lying over i. 

Proof. Let 6 be the character (with values in which gives the 

action of GaI(Q^/(Q) on 0. Let C = ((Qp/Zp)((?), where we now regard 6 as 
a character of Gal(Qj;/Q) with values in . Then = C\p]. We have an 
isomorphism 

(The surjectivity is clear. The injectivity follows from the fact that 
-ff°((Q2;/Qooi C*) is either C or 0, depending on whether is trivial or non- 
trivial.) We will relate the structure of H^{(Il^/(S^^,C) to various classical 
Iwasawa modules. Let S' = E — {p}. Consider 

5^(Q^) =ker(Fi(Q^/Q^,C) - JJ '^cM- 

If £ £ S' is nonarchimedean, then iJ^((QoQ)^, C) is either trivial or isomor- 
phic to Qp/Zp, for any prime r] of Q^^ lying over £. 'P|[^'(Qoo) is then a 
cotorsion yl-module with //-invariant 0. If i = oo, then ((Qoo)»? = ^ for any 
ri\£. H^(Si,C) is, of course, trivial if p is odd. But if p = 2, then 9 is triv- 
ial and H^{]R,C') = Z/2Z. Thus, in this case, 'Pc°°^(Qec) is isomorphic to 
Hom(yl/2yl, Z/2Z) = A[2], which is vl-cotorsion and has /x-invariant 1. It 
follows that i?^(Q2;/Qoo5 ^)/'^c(^oo) is ^-cotorsion and has //-invariant if 
p is odd. If p = 2, then the /i-invariant is < 1. 

Assume that p is odd. Let F be the cyclic extension of Q corresponding 
to e. (Thus, F C and ^ is a faithful character of Gal(F/Q).) Then = 
FQ^ is the cyclotomic Zp-extension of F. We let A = Gal{F^/(^^) ^ 
Gal(F/Q). Let 

X = Gal(Loo/Foo), Y = Gal(Moo/Foo) 
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where Moo is the maximal abelian pro-p extension of Fao unramified at all 
primes of F^o not lying over p and L^o is the maximal subficld of A'/qo un- 
ramified at the primes of F^o over p too. Now G&\{Foo/^) = A x F acts on 
both X and Y by inner automorphisms. Thus, they are both Tl-modules on 
which A acts yl-linearly. That is, X and Y arc yl[Z\]-modulcs. 

The restriction map iJi(Q^/Q^,C) ifi(Q^/Foo, C")^ is an isomor- 
phism. Also, Gal(Qj;/Foo) acts trivially on C. Hence the elements of 
H^{€l^/Foo,C) are homomorphisms. Taking into account the local condi- 
tions, the restriction map induces an isomorphism 

5^(Q^) ^ Rom^iY, C) = Hom(y^ C) 

as yl-modules, where Y^ = egY, the ^-component of the Z\-modulc Y. (Here 
€0 denotes the idempotent for 9 in Zp[Z\].) Iwasawa proved that Y^ is A- 
torsion if 9 is even and has yl-rank 1 if ^^ is odd. One version of the Ferrero- 
Washington theorem states that the /i-invariant of Y^ vanishes if 9 is even. 
Thus, in this case, .//^(Q^/Q^^, C) must be yl-cotorsion and have /i-invariant 
0. It then follows that 6*) must be finite. On the other hand, 

if 9 is odd, then S'^(Qoo) "^^^^ have yl-corank 1. Hence, the same is true 
of ffHQs/Qoo,C) and so (Q^/Q^^, C)[p] will have (yl/pyl)-corank > 1. 
We will prove that equality holds and, therefore, i/^(Q2;/Qooi ^) indeed 
has (yl/pyl)-corank 1. It is sufficient to prove that S'^(Qo2)[p] has (A/pA)- 
corank 1 . We will deduce this from another version of the Ferrero- Washington 
theorem — the assertion that the torsion /1-module X has /x-invariant 0. Let 
TT be the unique prime of Q^^ lying over p. Consider 

5c(Qoo) =ker(5^(Q^) ^ i?i((Q^V,C)). 

In the course of proving lemma 2.3, we actually determined the structure 
of iI^((Qoo)7r, C). (Sec also section 3 of [Gr2].) It has yl-corank 1 and the 
quotient H^{{^oo)Tr^ C')/i?^(((QgQ)7r, C)/i-div is either trivial or isomorphic to 
Qp/Zp as a group. To show that '5^(Qoo)[p] has (yl/pyl)-corank 1, it suffices 
to prove that Sc{(Sioo)\p] is finite. Now the restriction map identifies Sci^oo) 
with the subgroup of Hom^i {Y, C) which is trivial on all the decomposition 
subgroups of Y corresponding to primes of F^c lying over p. Thus, Sci^oo) 
is isomorphic to a yl-submodule of Hom^(X, C) = Hom(X^,C). Since the 
/z-invariant of X vanishes, it is clear that Sc{(^cc)[p] is indeed finite. This 
completes the proof of lemma 5.9 when p is odd. 

Now assume that p = 2. Thus, 6 is trivial. We let Foo = Qoo- Let Moo 
be as defined above. Then it is easy to see that Moo = Qoo- For let Mq be 
the maximal abelian extension of Q contained in M^c- Thus, Gal(Mo/(Qoo) = 
Y/TY. We must have Mo C Q(/<2°°)- But Mq is totally real and so clearly 
Mo = Qoo- Hence Y/TY = 0. This implies that Y = and hence that 
Moo Qoo- Therefore, 5;;.(Qoo) = 0. It follows that T/^Qs/Qoo C*) is ^- 
cotorsion and has /i-invariant < 1. In fact, the /i-invariant is 1 and arises 
in the following way. Let Uoo denote the unit group of Q^^. Let K^o = 
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^ooiiV^W € ^oo})- Then Kaa C M^, the maximal abelian pro-2 extension 

of unramificd outside of the primes over p and oo. Also, one can sec that 

Gal(i^oo/Qoc) = ^/2^- Thus, clearly i/i(Q^/Qoo, t^)[2] = i?HQi:/Qoo, ^) 
contains the Tl-submodule Hom(Gal(_R'oc/Qoo)i 6*) which has /x-invariant 1. 
To complete the proof of lemma 5.9, wc point out that K^c can't con- 



tain any totally real subfield larger than Q^^, since 



Q^. That is, 



ker(a) n Hom(Gal(ii:oo/Qo 



also see that a must be surjective because ^^"^(Q 



),0) is trivial. It follows that ker(a) is finite. We 

) is isomorphic to A[2]. 



We must complete the proof of proposition 5.8 for p = 2. Consider the 
following commutative diagram with exact rows: 



■V 



(oo) 

m 



By lemma 5.9, both ai and are surjective and have finite kernel. Also, 
ker(a) is finite. We see that H^{^^/<^^,E[2]) has (yl/2yl)-corank equal to 
1 or 2. First assume that E{Si) is connected, i.e., that the discriminant of 
a Weierstrass equation for E is negative. Then i?^(]R, i<^[2]) = 0, and so 
(^oo) = 0. It follows that do ai is the zero map and hence Im(6) is finite. 
Thus, 7J^(Q^/Q^,ii;[2]) is pseudo-isomorphic to i7i(Q^/Q^, ^) and so has 
(yl/2yl)-corank 1. In this case, iJi(Q^/Q^, £[2°°]) must have yl-corank 1 
and its maximal yl-cotorsion quotient must have /x-invariant 0. This proves 
proposition 5.8 in the case that £'(IR) is connected. 

Now assume that i?(]R) has two components, i.e., that a Weierstrass equa- 
tion for E has positive discriminant. Then E\l\ C £:(IR) and H'^{M,,E\1\) ^ 
(Z/2Z)2. The (yl/2yl)-module V^-^^^{<Si^) is isomorphic to A\lf . In this case, 
we will see that H'^{(Sisl<Si^,E\l\) has (yl/2yl)-corank 2. This is clear if 
£^[2] = ^ X !Z' as a Gq-module. If £^[2] is a nonsplit extension of if' by 
then F — Q(i?[2]) is a real quadratic field contained in Q^. Let Foo = -FQoo- 
Considering the field K^o ~ Fao(X^u\u G Uf^}), where Up^ is the group of 
units of i^oo, one finds that 7Ji(Q^/Foo, and iJi((Q^/Foo, if ) have {A/2A)- 
corank 2. Now E[2] ^ <P x ^ as a GF-modulc and so H'^{<^^/Foo, E[2]) 
has (yl/2yl)-corank 4. The inflation-restriction sequence then will show that 
H^{^s/^oo,E[2]) is pseudo-isomorphic to i/i(Q^/Foo, £^[2])"^, where A = 
Gal(Foo/Qoo)- One then sees that i?i((Q^/Q^, £;[2]) must have iA/2Ay 
corank 2. The facts that c is injective and that both ai and as have finite 
kernel implies that a2 has finite kernel too. The map a2 must therefore be 
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surjective. Now consider the commutative diagram 



Note that P^'^L](Qoo) is what we denoted by ^^^^(^00) in section 4. The 
map H^{TR,E[2]) H'^ (JR, E[2°°]) is surjective. (But it's not injcctivc since 
H-^ {]R, E[2°^]) = Z/2Z when E{JR) has two components.) Hence the map e 
is surjective. Thus eo a2 is surjective and this imphes that a^; is surjective. 
In fact, more precisely, the above diagram shows that the restriction of 
to ffi(Q^/Q<^,i;[2°°])[2] is surjective. 

We can now easily finish the proof of proposition 5.8. Clearly 

i?i(Q^/Q^,S[2°°])A-div C keiiaE). 

Since ker(aB)[2] has (yl/2/l)-corank 1, it is clear that H^i(^^/q,^, E[2°°]) 
has yl-corank 1 and that ker(Q;_E)/i?^(Qi;/Qoo' -^[2°°])yi-div has /x-invariant 
0. Hence the maximal yl-cotorsion quotient of iI^(Q^/Q;^, £^[2°°]) has fi- 
invariant 1. ■ 



Remark. Assume that E is an elliptic curve/ Q which has a Q-isogeny of 
degree p. Assuming that Seli;(Q<^)j, is yl-cotorsion, the above results show 
that Sel£;((Qj^)p contains a yl-submodule pseudo- isomorphic to Thus 
the /;i-invariant of Sel£;(Qoo)p arises "non-semisimply" if /x^ > 1. For odd p, 
we already noted this before. For p = 2, it follows from the above discussion 
of ker(Q:£) and the fact that Sel£;((QQQ)p C kcr(a£;). If E has no Q-isogeny of 
degree p, then /xb is conjecturally 0, although there has been no progress on 
proving this. 

Before describing various examples where /i^ is positive, we will prove 
another consequence of lemma 5.9 (and its proof). 

Proposition 5.10. Assum,e that p is odd and that E is an elliptic curae/Q 
with good, ordinary or multiplicative reduction at p. Assume also that E[p°^] 
contains a G(^-invariant subgroup <P of order p which is either ramified at p 
and even or unramified at p and odd. Then SelE{Q,oo)p A-cotorsion and 
He = 0. 

Proof. We will show that Sel£;(QgQ)[p] is finite. This obviously implies the 
conclusion. We have the exact sequence 

H\(^j:m^, ^) A i/i(Q^/Q<^, E\p]) ^ iJi(Q^/Q^, !f ) 
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as before. Under the above hypotheses, both c^'^'^oo and ^'^'^oo are trivial. 
Hence H^{Q,s/Q,^, E\p]) = 0. This implies that 

if HQi:/Qoo, E\p]) ^ H\<5i^/<Si^, Enip] 

under the natural map. Thus we can regard SelB(Qoo)b] ^ ^ subgroup of 

-f^^CQij/Qooi -^b])- Assume that Sel£;(Q3^)[p] is infinite. Hence either B = 
6(Sel£;(Qoo)[p]) or A — Im(a) fl Sel£;(Q;^)[p] is infinite. Assume first that 
B is infinite. Then, by lemma 5.9, ^ must be odd. Hence ^ is unramified, 
# is ramified at p. Let tt be any prime of lying over the prime tt of 
over p. Then = Gfr\p], where is the subgroup of E\p°°] occurring 
in propositions 2.2, 2.4. (For example, if E has good reduction at p, then 
Cff is the kernel of reduction modulo tt : E[p°°] E[p°°].) The inertia 
subgroup Itt of Gal(Q^/Qoo) for tt acts trivially on = E\p°°]/CTr- Thus, 
^ can be identified with £>7f[p]- Let ct be a 1-cocycle with values in E[p] 
representing a class in Sel£;(QQQ)[p]. Let a be the induced 1-cocycle with 
values in if". Since H^{I^,D^) = Hom(/ff , D^), it is clear that a\i- = 0. 
Thus, a e H^{(^j^/(^l^,^) is unramified at tt. Now for each of the finite 
number of primes rj of Q^^ lying over some £ E EJ.^p, H^{{Q^^)n,'l^) is 
finite. Thus, it is clear that i?nffyjj^(Q^/Q(^, iP') is of finite index in B and is 
therefore infinite, where iJ„„r(Qi:/Q(x)' denotes the group of everywhere 
unramified cocycle classes. However, if we let F denote the extension of Q 
corresponding to tp, then we see that 

^unr(Qi:/Qoo,!^')=Hom(X^tf'). 

where we are using the same notation as in the proof of proposition 5.9. The 
Ferrero- Washington theorem implies that iJu„r(Q^/Qoo, is finite. Hence 
in fact B must be finite. Similarly, if A is infinite, then <P must be odd and 
hence unramified. Thus, fl Cff = 0. If u is as above, then cr|/, must have 
values in C*. But if a represents a class in A, then we can assume that its 
values are in Thus a\j^ = 0. Now the map H^{It,,<1') i?^(/jf , E^ljj]) is 
injective. Thus, we see just as above, that -ffunr(Qi;/Qoo! ^) infinite, again 
contradicting the Ferrero- Washington theorem. ■ 

Later we will prove analogues of propositions 5.7 and 5.10 for p = 2. 
One can pursue the situation of proposition 5.10 much further, obtaining for 
example a simple formula for A_e in terms of the A-invariant of , where 
6 is the odd character in the pair ip,'il). (Remark: Obviously, ipil) = u). It 
is known that and Y^^ have the same A-invariants, when 9 is odd. 
Both yl-modules occur in the arguments.) As mentioned in the introduction, 
one can prove conjecture 1.13 when i^/Q has good, ordinary reduction at p 
and satisfies the other hypotheses in proposition 5.10. The key ingredients 
are Kato's theorem and a comparison of A-invariants based on a congruence 
between p-adic L-functions. We will pursue these ideas fully in [GrVa]. 

Another interesting idea, which we will pursue more completely elsewhere, 
is to study the relationship between SelB(Qoo)p S61b'(Qoo)p when E and 
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E' are elliptic curves/Q such that E[p] = E'[p] as GQ-modules. If E and E' 
have good, ordinary or multiplicative reduction at p and if p is odd, then it is 
not difficult to prove the following result: i/SelB(Qoo)p[p] finite, then so is 
Sel_E' (Qoo)p [p] ■ It follows that if Sel_E(Q3o)p is Tl-cotorsion and if he =0, then 
Sel_E/(Qoo)p is also yl-cotorsion and he' = 0. Furthermore, it is then possible 
to relate the A-invariants A^; and A^' to each other. (They usually will not 
be equal. The relationship involves the sets of primes of bad reduction and 
the Elder factors at those primes.) 

A theorem of Washington [Wal] as well as a generalization due to E. Fried- 
man [F] , which are somewhat analogous to the Ferrero- Washington theorem, 
can also be used to obtain nontrivial results. This idea was first exploited in 
[R-W] to prove that E{K) is finitely generated for certain elliptic curves E 
and certain infinite abelian extensions K of Q. The proof of proposition 5.10 
can be easily modified to prove some results of this kind. Here is one. 

Proposition 5.11. Assume that E and p satisfy the hypotheses of proposi- 
tion 5.10. Let K denote the cyclotomic 'Kq-extension of (Si, where q is any 
prime different than p. Then ScIe{K)[p] is finite. Hence 

SelE{K)p ^ (Qp/Zp)* X (a finite group) 

for some t>0. 

Washington's theorem would state that the power of p dividing the class 
number of the finite layers in the Zg-extension FK/F is bounded. To adapt 
the proof of proposition 5.10, one can replace Im(«;^) by Im(A^) for each prime 
r} oi K lying over p, obtaining a possibly larger subgroup of H^{K,E\p°°]). 

n 

The arguments also work if Gal(/r/Q) = fl'Z.q, where qi,q2,... ,qn are 

i=l 

distinct primes, possibly including p. Then one uses the main result of [F]. 
One consequence is that E{K) is finitely generated. If E is any modular 
elliptic curve/Q, this same statement is a consequence of the work of Kato 
and Rohrlich. 

We will now discuss various examples where ^e > ^- We will take the 
base field to be Q and assume always that E is an elliptic curve/Q with 
good, ordinary or multiplicative reduction at p. We assume first that p is 
odd. Since Vp{E) is irreducible as a representation space for Gq, there is a 
maximal subgroup of E\p°^] such that is cyclic, GQ-invariant, ramified 
at p, and odd. Define ruE by |#| = p"*^. Thus, niE > 0. Proposition 5.8 
states that /^.b > ttib. It is not hard to see that conjecture 1.11 is equivalent 
to the assertion that he — nriE- For p = 2, tue can be 0, 1,2,3, or 4. For 
p = 3 or 5, niE can be 0, 1, or 2. For p — 7, 13, or 37, the can be or 
1. For other odd primes (where E has the above reduction type), there are 
no Q-isogenies of degree p and so niE — 0. In [Mazl], there is a complete 
discussion of conductor 11 and numerous other examples having non-trivial 
p-isogenies. 
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Conductor = 11. If iJ has conductor 11, then E[p] is irreducible except 
for p = 5. Let Ei, E2, and E3 denote the curves llAl, 11A2, and 11A3 
in Cremona's tables. Thus Ei = Xo{ll) and one has -Bi[5] = fj,^ x Z/52 
as a GQ-module. For E2 (which is i5i/(Z/5Z)), one has the nonsplit exact 
sequence 

^ ^ E2M 2/5Z ^ 0. 

Now E2/ = El and so one sees that £^2 [5°°] contains a subgroup which 
is cyclic of order 25, Gq-invariant, ramified at 5, and odd. is an extension 
of /U5 by /U5.) For £3 (which is Ei/n^), one has a nonsplit exact sequence 

^ Z/5Z ^ E3[5] ^ /i5 ^ 0. 

All of these statements follow from the data about isogenies and torsion 
subgroups given in [Crc]. One then sees easily that msi — 1, ''nE2 = 2, and 
= 0. Wc will show that Sol£;i({Q^)5 = A[5], Scl£;,(Q^)5 ^ A[5% and 
Sel£;3 ((Q(^)5 = 0. Thus, = and /lEi = rnEi for 1 < z < 3. 

We will let <Pi = ns and = Z/5Z as Gq-modules for 1 < i < 3. Then 
we have the following exact sequences of Gq-modules 

— ^ ^2 — ^ E2[5] — ^ ^2 ^ 



— ^ ^3 — ^ Eslb] — ^ <?3 — ^ 0. 

These exact sequences are nonsplit. For Ei, we have -Ei[5] = #1 x •Z'l. As 
Gq^ -modules, we have exact sequences 

^ Cg ^ Ei[5°°] ^ £)5 ^ 

where is unramificd and C5 = /Ugoo for the action of /q^ , the inertia 
subgroup of Gqj.. There will be no need to index C5 and D5 by i. As Gq^^- 
modules, we have exact sequences 

^ Gil ^ Ei[5'^] ^Dn^O 

where Gn = /X500 and Dn = Q5/Z5 for the action of Gq^^. It will again 

not be necessary to include an index i on these groups. The homomorphisms 
Ei[5°°] D5 and i?i[5°°] — ^ Du induce natural identifications. As Gq^- 
modules, ^i, ^2, ^3 are all identified with D5[5]. This is clear from the action 
of Gq^^ on these groups (which is trivial). But, as Gaj^^-modules, <Pi, tf^i, 1^2, 
and arc all identified with Z)ii[5]. One verifies this by using the isogcny 
data and the fact that the Tate periods for the Ei^s in Qf^ have valuations 
5, 1, 1, respectively. For example, if <?i or iJ/i were contained in Gn, then the 



72 Ralph Greenberg 



Tate period for E2 or E3 would have valuation divisible by 5. We will use the 
fact that the maps 

ffi(Qii,I)ii[5])^i?i(Qn,^ii), H\lsi^,D5[5])^H\l^^,D,) 

are both injcctivc. This is so because Gq^^ acts trivially on Dn and /q^ acts 
trivially on D^. Our calculations of the Selmer groups will be in several steps 
and depend mostly on the results of section 2 and 3. We take X' = {oo,5,ll}. 

Sel£;3(Q)5 = 0. Suppose [a] e SelE3(Q)[5]. It is enough to prove that 

[cr] = 0. We can assume that a has values in £"3 [5]. (But note that in 
this case the map i/i(Q^/Q, i;3[5]) H^i^^/q^EslB"^]) has a nontriv- 
ial kernel.) The image of a in ^3) = H^{(5^ii, Dii[5]) must become 

trivial in H^{^ii, Dn). Thus this image must be trivial. Now ^3 = /i5 
and i?^(Q2:/Q) Ms) — (^/52)^, the classes for the 1-cocycles associated to 
v^S'll-J, < i, j < 4. The restriction of such a 1-cocycle to Gq^j is trivial 
when 5*11-' € (Qn)''; which happens only when i = j = 0. Thus, the image 
of [a] in if^(Q2;/(Q, ^3) must be trivial. Hence we can assume that a has 
values in #3 = 

Now i/i(Q^/Q,if3) = (Z/5Z)2 by class field theory, but its image in 
iJ^((Q^/(Q, i?[5°°]) is of order 5. Since [a] € Sel£;3(Q)5, it has a trivial image 
in H^{I(^^, D5). Hence, regarding a as an element of Hom(Gal(Q^/Q), tf's), 
it must be unramified at 5 and hence factor through Gal(-fi'/Q), where K 
is the cyclic extension of Q of conductor 11. But this implies that [cr] = 
in i?i(Q^/Q,S[5°°]) because Hom(Gal(i4:/(Q), iZ'g) is the kernel of the map 
^^HQi;/Q,tf'3) ^ i?HQi:/Q>£^[5°°])- To see this, note that this kernel has 
order 5 and that the map iI^(/Q^, ^'3) H^{I(x^^,D5) is injective. Hence 
SelB3(Q)5 =0. 

SelB,(Q)5 = 0. We have H\(^s/<£l, E2[5]) ^ iJHQ^/Q, i^2[5°°])[5]. Let 
[cr] G Sel_E2(Q)[5]. We can assume that a has values in i?2[5]. The image of a 
in H^{<^j^/(S^,^2) must have a trivial restriction to Gq^^. But 

H\q,s/q,^2) = Hom(Gal(Ji:L/Q),Z/5Z), 

where K is as above and L is the first layer of the cyclotomic Zs-cxtcnsion 
of Q. Now 11 is inert in L/Q and ramified in KL/L. Thus it is clear that a 
has trivial image in iZ'2) and hence has values in #2 = Ms- 

Now i?^(Qx'/Q,At5) = (Z/5Z)2, but the map 

eo : ifi(Q£/Q,M5) ^ H^iSl^/^, E2[5]) = H^^^/q, E2[5°°])[5] 

has ker(eo) = Z/5Z. Now [a] E Im(eo), which we will show is not contained 
in SelB2(Q)5- This will imply that SelB2(Q)5 = 0. Consider the commutative 
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diagram 



(Qi;/Q,M5) 



a 



(Q5>M5) 



b 



(Q5.C5) 



(Q^/Q,i;2[5°°]) 



c 



(Q5,E2[5°°]) 



One sees easily that a is an isomorphism. Also, 7J^((Q5,^5) = (Z/52)^ and 
b induces an isomorphism H^{€l^,fi5) = 7J^((Q5, C5)[5]. Referring to (2) fol- 
lowing the proof of lemma 2.3, one sees that ^^^(Qj, C5) = (Q5/Z5) x Z/5Z. 
(One needs the fact that \E2{'^/5'2.)\ is divisible by 5, but not by 5^.) In 
section 2, one also finds a proof that the map 



is an isomorphism. (See (3) in the proof of proposition 2.5.) If we had Im(eo) C 
Sc1_e2(Q)5j then we must have Im(co eo) C Im(A5)div, which is the image of 
the local Kummer homomorphism K5. But this can't be so because clearly 
Im(& oa)^ H\(^^,C5)div It follows that Sel£;2(Q)5 = 0. 

Although we don't need it, we will determine ker(eo). The discussion in 
the previous paragraph shows that ker(eo) is the inverse image under 60 a of 
i?^((Q5, C5)div[5]. One can use proposition 3.11 to determine this. Let (p be 
the unramified character of Gq^ giving the action in D5 = E2 [5°°] . Since 5 
is an anomalous prime for E2, one gets an isomorphism 



where now R = Zp[[G]], G = Gal(Moo/Q5). We have C5 = fi^oa (g) ip-'^ 
and H\M^,C5)=H\M^,fi5oo)®ip-\ Now i/i(Q5, ^^5)^i^'(Mco, ^5)'^, 
by the inflation-restriction sequence. The image of H^{(S^^,C5)div under the 
restriction map is H^{Mod,C5)'^_^^^. But i?^(Moo, G5)_R-div coincides with 
-ff^(Moo, M5°°)fl-div, with the action of G twisted by Let g G Q5 and 
let cTq be the 1-cocycle with values in /is associated to Then aq £ 
F^(Q5,C5)div if and only if (TqlcM^ ^ H^iM^o, H5^)R-div By proposition 
3.11, this means that g is a universal norm for M00/Q5, i.e., q G Z5 . Now 
i?^((Q^/(Q, /is) consists of the classes of 1-cocycles associated to -y/u, where 
u = 5'IP, < i,j < 4. It follows that kcr(eo) is generated by the 1-cocyclc 



corresponding to There are other ways to interpret this result. The 

extension class of Z/5Z by ^5 given by £^2 [5] corresponds to the 1-cocycle 



associated to VTl. The field <^{E2[5]) is Q(At5, ^). The Galois module 
£'2(5] is "peu ramifiee" at 5, in the sense of Serre. (This of course must be so 
because E2 has good reduction at 5.) 



H\<^„C5)/H\([i„C5)di. ^ Im(A5)/Im(A5)div 



if : Gal(M^/Q5) ^ 1 + SZg 



where M^o denotes the unramified Zs-extension of Q5. One has 
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SelEi(Q)5 = 0. We have an exact sequence 

^ H\ns/n,1'i) ^ i?i(Qs/Q,i?i[5°°]) ^ ifi(Q^/Q,i?2[5°°]). 

Since Seli32(Q)5 = 0, it is clear that Sel£;i(Q)5 C Im(ifi(Q^/Q, if-i)). But 
^1 = Z/5Z and H'^{<^s/<^,^i) = Hom(Gal(/rL/Q), Z/5Z), where K and 
L are as defined before. Since the decomposition group for 11 in Gal(_ftrL/Q) 
is the entire group and since 'I'l is mapped to -Dii[5], we see as before that 
-H'HQi:/Q,'^i) ^ H'^{<^n,Ei[5°°]) is injective. Hence Seli=;i(Q)5 = 0. 

fE, {T) = 5"*^^. We can now apply theorem 4.1 to see that /bi(0) 5, 
(0) 5^, and fEaiO) 1, using the fact that £'i(Z/5Z) has order 5. But 
we know that 5"^^ divides /^-(T). Hence it follows that, after multiphcation 
by a factor in A"" , we can take fs^ (T) = 5, /e^ (T) = 5^ and fs^ {T) = I. We 
now determine directly the precise structure of the Selmer groups Sel^^ (Qoo)5 
as yl-modulcs. 

Sel£;3(Q<^)5 = 0. The fact that fssiT) = 1 shows that Sel£;3(Q^,)5 is 
finite. Proposition 4.15 then implies that Sel£;3(Qo2)5 = 0. However, it is 
interesting to give a more direct argument. We will show that the restriction 
map Sq^^ : Sel£;3(Q)5 Sel£3 (Qq^)!" is surjective, which then implies that 
SelBaCQoo)^ and hence Scl£;3((Qo^)5 are both zero. Here and in the following 
discussions, we will let Sq \ /iq*', ^ and ri!'^ for v G {5, 11} denote the maps 
considered in sections 3 and 4 for the elliptic curve Ei, 1 < i < 3. Thus, 
ker(s[,'^) = for 1 < i < 3, by proposition 3.9. But | ker(/i[,^^)| = 5. We have 
the exact sequence 

^ ker(4^^) ^ ker(5^^^) ^ coker(s^^^) ^ 0. 

Thus it suffices to show that | ker(5Q^^)| = 5. We let 

Now vEM = ^eM^) X HeMu), 'pEMoo) = nEMin x HeMIT)- 

The local duality theorems easily imply that 

HeMs) = if^(Q5,^3[5°°])/Im(K5) = (Q5/25) X Z/5Z 

HeMii) = H'{nn,Es[5^]) ^ Z/5Z. 

The kernels of the maps ri'^ : H_Ei(Q„) ^-Ei(QJj™) can be determined by 
the results in section 3. In particular, one finds that |ker(rf^)| = 5^, while 
rpi^ is injective. Also, HeMI^") = H^{(^7'',D5) ^ 1 for 1 < i < 3. Thus, 
Im(r5*^) is obviously isomorphic to Q5/Z5 for each i. It follows that A has 
order 5^, A C 'He3{^5), Ar\HE3i^5)div has order 5, and AHE3i^5)div = 
HEsi^Sis)- Now CJ^_^(Q) has index 5 in VEsi^) ^^'^ projects onto 'H.EsiQ.n)- 
It follows easily that 

\ker{9^'^)\ = \Anglm\=5. 
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As we said, this implies that Sel£;3(Qoo)5 = 0- 

Selsj (Qoo)5 — ^[5^] ■ Let be the G([j-invariant subgroup of E2 [5°°] which 
is cychc of order 5^. (This <P is an extension of by #2-) We have £2/^ = -E3. 
Since Seli;3(Qgo)5 = 0> follows that 

Seli=;,(Q^)5 C Im(Hi(Q^/Q^,f) ^ ifi(Q^/Q^, E2[5°°])). 

The index is finite by proposition 5.7. Thus it is clear that Scl£;2(Qo2)5 is 
pscudo- isomorphic to A[5^] and has exponent 5^. Since ii^2(Q) = 0, we have 
= and ker(/i(')) = 0. Hence 

coker(s[,^^) ^ ker(5^^)) ^ ker(rf x kcr(rpi'). 

Now ker(r^^^) = because 5 | ordii(g^^^^^), where q^^^' denotes the Tate pe- 
riod for E2 in 0,11. Also, |ker(r5^'')| = 5^. We pointed out earlier that the 
Gq-module £^2 [5] is the nonsplit extension of 2/52 by ^5 corresponding to 
vTT. Since 11 ^ (Q5 )''', this extension remains nonsplit as a Gq^. -module. 
Thus, H°{q^,E2[5°°]) = 0. One deduces from this that H'^iO^, E2[5°^]) = 
Q5/Z5 and ^^^(Qs) ^ Q5/Z5. This implies that ker(rf ^) ^ 2/5^2. Hence 
ker(5Q^^), coker(sQ^') and hence Sel_E2(Qoo)5 are all cyclic of order 5^. There- 
fore, Xe2{0cc) = Scl£;2(Qoo)5 is a cyclic yl-modulc of exponent 5^. That is, 
Xe2{0oo) is a quotient of vl/5^yl and, since the two are pseudo-isomorphic, 
it follows easily that -'^B2(Qcxd) — This gives the stated result about 

the structure of SelB2(Qoo)5- 

Selii;i(Q^)5 ^ A[5]. Since Ei/^i ^ E3, it follows that 

Seli=;,(Q^)5 C Im(ifi(Q^/Q,^i) ^ ifi(Q^/Q^, ^i[5°°])). 

Hence Sel£;i(Q^)5 has exponent 5 and is pseudo-isomorphic to A[5]. Also, 
by proposition 4.15, Sel£;j(Qg^)5 has no proper /1-submodules of finite in- 
dex. Thus, XsiiOoo) is a (yl/5/l)-modulc pseudo-isomorphic to {A/5A) and 
with no nonzero, finite yl-submodules. Since A/5A is a PID, it follows that 
Xei{Ooo) — A/5A, which gives the stated result concerning the structure of 

Twists. Let ^ be a quadratic character for Q. Then ^ corresponds to a 
quadratic field (^{^/d), where d = € '2. and \d\ is the conductor of ^. 
We consider separately the cases where ^ is even or odd. For even ^, the fol- 
lowing conjecture seems reasonable. It can be deduced from conjecture 1.11, 
but may be more approachable. We let E^ denote the quadratic twist of E 
by d. 

Conjecture 5.12. Let E he an elliptic curve/^ with potentially ordinary or 
multiplicative reduction at p, where p is an odd prime. Let ^ be an even 
quadratic character. Then Sel^i (Qoo)? ^''^'^ SelB(Qoo)p ^'^^^ same /i- 
invariants. 
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We remark that the A-invariants can certainly be different. For example, 
if E is any one of the three elliptic curves of conductor 11, then A^; = 
for any prime p satisfying the hypothesis in the above conjecture. But if ^ 
is the quadratic character corresponding to Q(a/2) (of conductor 8), then 
rank(£;«(Q)) = 1. (In fact, is 704(A1, 2, or 3) in [Cre].) Then of course 
Ab« > 1 for all such p. 

Assume now that ^ is an odd character and that ^(5) ^ 0. Let E be 
any one of the elliptic curves of conductor 11. Let p = 5. Then -B^[5] is Gq- 
reducible with composition factors /X5 ® ^ and (2/5Z) ® ^. The hypotheses 
in proposition 5.10 are satisfied and so the /it-invariant of Sel^s (Qoo)5 is zero. 
The A-invariant A^c is unchanged by isogeny and so doesn't depend on the 
choice of E. It follows from proposition 4.14 that Sel£;«(Q(^)5 is divisible. 
Hence X^e, which is the 25-corank of Sel£;£(Qo2)5, is obviously equal to the 
(2/52)-dimension of Sel^s (Qoo)5[5]- We will not give the verification (which 
we will discuss more generally elsewhere), but one finds the following formula: 

Ab« = 2A^ + e^, 

where d = and Aj denotes the classical A-invariant X{Foo/F) for the imag- 
inary quadratic field F = Q(-\/d) and for the prime p = 5 and where = 1 
if 11 splits in Q(-\/d)/Q, = if 11 is inert or ramified. By proposition 
3.10, it follows that corank25(Sel£;j ((5)5)) = e{(mod 2), which is in agree- 
ment with the Birch and Swinnerton-Dyer conjecture since the sign in the 
functional equation for the Hasse-Weil i-function L(iJ^ /Q, 5) = L{E/€l, 5) 
is (— 1)'^«. As an example, consider the case where ^ corresponds to Q(V^). 
Then E« is 704(K1, 2, or 3). The class number of Q(y^) is 1. The prime 
p = 5 is inert in F = ([^{y/^). Hence the discussion of Iwasawa's theorem 
in the introduction shows that the A-invariant for this quadratic field is 0. 
But 11 splits in F. Therefore, A^^ ~ 1. Since ran k{E^q,)) = 1, it is clear 
that SelB{(QoQ)5 = i?^((Q) ® (Qp/2p). As another example, suppose that ^ 
corresponds to F = Q(V^). Then E^ is 176(B1, 2, or 3) in [Cre]. The prime 
5 splits in F/Q and so X{F^/F) > 1. In fact, XiF^/F) = 1. Since 11 is 
inert in F, we have Xsi = 2. But F^(Q) is trivial. If i?^(Qi) had positive 
rank, one would have rank(i??(Qj)) > 4 (because the nontrivial irreducible 
Q-representation of Gal(Qi/Q) has degree 4). Hence it is clear that A™ = 2, 
A^f ^ = 0. T. Fukuda has done extensive calculations of X{Fao/F) when F 
is an imaginary quadratic field and p = 3,5, or 7. Some of these A-invariants 
are quite large. Presumably they arc unbounded as F varies. For p = 5, he 
finds that A5 = 10 if ^ corresponds to F = Q(V-3, 624, 233). Since 11 spUts 
in F/Q, we have X^i = 21 in this case. However, we don't know the values 
of A^j-^ and A™. 

We will briefly explain in the case of E^ (where E and ^ are as in the 
previous paragraph and p — 5) how to prove conjecture 1.13. Kato's theorem 
states that f^{T) divides /^"'''(T), up to multiplication by a power of p. 
Thus, X{f^'^^) > X^i- Now it is known that Aj is equal to the A-invariant 
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of the Kubota-Leopoldt 5-adic i- function ^5(0;^, s). The /U- invariant is zero 
(by [Fe-Wa]). In [Maz3], Mazur proves the foUowing congruence formula 

L5(^VQ> s) = {1- ^(11)111-«)L5K, s - l)i5K, 1 - s) (mod 5Z5) 

for all s e 25. More precisely, one can interpret this as a congruence in the 
Iwasawa algebra A modulo the ideal 5 A. The left side corresponds to /|,"'*'(T), 
and each factor on the right side corresponds to an element of A. The two 
sides are congruent modulo 571. Now, if f{T) £ A is any power series with 
= 0, then one has f(T) = iiT^'^^^ (mod pA), where u G A^ . Applying 
this, we obtain A(/^^''') = 2A{ + and therefore A(/|,^''') = A^j. Since both 
/|;"*'(T) and /b(T) have /x-invariant equal to zero, it follows that indeed 
{fEiT)) = {.f^T\T)). 

Theorems 4.8, 4.14, and 4.15 give sufficient conditions for the nonexistence 
of proper Tl-submodules of finite index in Sel£;(Foo)p- In particular, if F = Q 
and if E has good, ordinary or multiplicative reduction at p, where p is any 
odd prime, then no such yl-submodule of Sel£;(Qo^)j, can exist. (This is also 
true for p = 2, although the above results don't cover this case completely.) 
The following example shows that in general some restrictive hypotheses are 
needed. We let F = Q(/Z5), Foe = Q(At5~). Let E = E2, the elliptic curve 
of conductor 11 with -B(Q) = 0. We shall show that SelE{Foo)5 has a yl- 
submodule of index 5. To be more precise, note that Gal(i^oo/Q) — A x F, 
where A = Gal{F^/q,^) and F = Gal{F^/F). Now A has order 4 and its 
characters are w', < i < 3. We can decompose SelB(f'cx>)5 as a vl-module 
by the action of A: 

3 

Sel£(F^)5=0Sel£(F^)f . 

i=0 

As we will see, it turns out that Self;(Foo)5'' — 2/52, which of course is a 

yl-modulc quotient of Sc\e{Foo)5- This component is (Sel£;(Foo)5 ® w^'^)'^, 
which can be identified with a subgroup of if^(Q^/(Q(^,i?[5°°](g)w~'^), where 
S = {00, 5, 11}. For brevity, we let A = £[5°°] (g) w"^. We let S'a(Qoo) denote 
the subgroup of H^{(^s/(^^„A) which is identified with Scli3(Foo)if by the 
restriction map. Noting that w"^ =0;, we have a nonsplit exact sequence of 
Gq-modules 

^ A^f 2 ^ A[5] ^ ^ 0. 

This is even nonsplit as a sequence of GQj,-modules or GQ^^-modules. The 
GQ-submodule fif^ of A[5] is just ^ w, which we will denote simply by 
We let ^ = A[5]/$. We will show that 

54Q^)^ifi(Qi:/Qcx>,^) 

where the isomorphism is by the map e : H^{(Si^/(£l^,<l>) H^{(S^^/€l^,A). 
This map is clearly injective. Since # C C5 ® w, it follows that the local 
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condition defining S'yi(Qo^) at the prime of lying over 5 is satisfied by 
the elements of Im(e). We now verify that the local condition at the prime of 
Qoo over 11 is also satisfied. This is because C Cn^w, which is true because 
the above exact sequence is nonsplit over Q^^. Since 11 splits completely in 
F/Q, t^lcojii trivial. Thus A = E[5°°] as Gq^^-modules. One then easily 
sees that the map 

is the zero map. That is, the map H^{(Q,{{'^ , A) H^{(Q,{{'^ , Dn) is an iso- 
morphism. Elements of Im(e) arc mapped to and hence arc trivial already 
in {Q^l]^ , A) , therefore satisfying the local condition defining ^'^((lioo) 
the prime over 11. 

So it is clear that Im(e) C S'a(Qoo)- We will prove that equality holds and 
that iJ^((Qj;/(Qg^,<?) = Z/52. This last assertion is rather easy to verify. 
Let = (Q,{^/5), the maximal real subfield of F. By class field theory, one 
finds that there is a unique cyclic extension K/F^ of degree 5 such that if/Q 
is dihedral and K C Q^. Thus, i?HQi:/Q,^) = iloui{Ga\{K/F+),$) has 
order 5. It follows that i?^((Q^/Qoo, is nontrivial. Also, one can see that 
K / F^ is ramified at the primes of F^ lying over 5 and 11. Let S' = {oo, 5}. 
Then is a Gal(Qj;,/Q)-module and one can verify that H^{^^, = 
0. (It is enough to show that ^^((Q^VQ^, <?>)^ = H^{<^s, /<^,<P) vanishes. 
This is clear since K/F^ is ramified at 11.) Therefore, the restriction map 
^f^(Qi:/Qoo>^) ^ i?^(QT>^) must be injective. But iJi(Qjf ,3') ^ Z/5Z, 
from which it follows that iJ^(Q^/Qoo, ^) indeed has order 5. 

It remains to show that S'^((Q^) C Im(e). Let B = Aj^. Then B = 
£i[5°°]®a; andB[5] = /xf^XMs as Goj-modules. We will prove that S'b(Qoo) = 
0, from which it follows that S'a(Qoo) ^ Im(e). Consider 6'_b(Qoo)[5], any 
element of which is represented by a 1-cocycle <j with values in i?[5]. The 
map _B[5] /is sends ct to a 1-cocycle such that [ctIg eye] is trivial as an 

element of i^^(Q5^^ i's «> w). Thus, [ a\ is in the kernel of the composite map 

The second map is clearly injective. If the kernel of the first map were non- 
trivial, jthen it would have a nonzero intersection with iJ^((Q^/Qj^, /is)^ = 
H^{^^m, /is). One then sees that the map a : i/i((Q^/Q, /is) ^ i?HQs> /^s) 
would have a nonzero kernel. But, as we already used before, the map a is 
injective. (The elements of i/^(Q2;/Q, /is) are represented by the 1-cocycles 
associated to a^SUP, < i, j < 3. But SUP G {^I f ^ i = j = 0.) Thus, 
the first map is injective too. Thus [a] = 0. Hence we may assume that a has 
values in /if ^. Now, in contrast to A, we have /if ^ ^ C^ii ® to. That is, the 
map B Dii induces an isomorphism /if^^Dii[5]. The composite map 
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is clearly injective. Since [a] becomes trivial in , B) , it follows that 

[a] G ker (i?i(Q^/Q^,/xf ) H\(Iilf,„f)) 

But we already showed that this kernel is trivial. (Recall that yuf^ = 
Hence [a] — 0, proving that 5*5 (Qo^) = as claimed. 

Conductor — 768. We return now to the elliptic curves 768(D1, D3) which 
we denoted previously by Ei and i?2- We take p = 5. As we mentioned 

earlier, Sel£;j(Q)5 = and Sel£;j((Qoo)5 = 0. Also, Ei and E2 are related by 
an isogeny of degree 5. Let ^ denote the Goj-invariant subgroup of i?2[5°°] 
such that £2/^ = El, |^| = 5. Let ^ = E2[5]/$. Then Gq acts on ^ and ^ 
by characters cp, ip with values in (2/52)^ which factor through Gal((Q^/Q), 
where now a — {00, 2, 3, 5}. Since E2 has good, ordinary reduction at 5, one 
of the characters 93, ip will be unramificd at 5. Denote this character by 0. 
By looking at the Fourier coefficients for the modular form associated to E2 
(which are given in [Cre]), one finds that 6 is the even character of conductor 
16 determined by 6'(5) = 2 + 5Z. Then 0(3) = 3 + 52. Now E^ and E2 
have split, multiplicative reduction at 3. One has a nonsplit exact sequence 
of G(Ej-modules 

which remains nonsplit for the action of Gq^ since the Tate period for Ei 
over Qg has valuation not divisible by 5. Thus, iZ' = /U5 as GQ3 -modules. 
Thus, ■0(3) = 3 + 5Z, (/3(3) = 1 + 5Z. Hence we have 9 = ip. Therefore, 
is even and imramified at 5, is odd and ramified at 5. By theorem 5.7, we 
see that Sel_E2 ((5,^)5 has positive y^-invariant. But since Selsi (([^30)5 = 0, it 
is clear that SelE,(Q^)5 C iIi(Q^/Q^, ^). Thus, he-, = 1 and SelB,(Q<^)5 
has exponent 5. One then sees easily (using proposition 4.8 and the fact that 
A/^A is a PID) that Sel£;2(Q(^)5 = A[h], as we stated earlier. Theorem 4.1 
then implies that SelE2(Q)5 = 0. 

Conductor = 14. Let p = 3. The situation is quite analogous to that for 

elliptic curves of conductor 11 and for p = b. The /i-invariants of Sel£;(Q(^)3 
if E has conductor 14 can be 0, 1, or 2. The A-invariant is 0. 

Conductor = 34. Let p = 3. There are four isogenous curves of conductor 
34. We considered earlier the curve E = 34(A1), showing that fsiT) = 6\, 
up to a factor in yl^ , where 6*1 = + 3T + 3. The curve 34(A2) is related to 
i? by a Q-isogeny of degree 2 and so again has /[^-invariant and A-invariant 
equal to 2. The two other curves of conductor 34 have Q-isogenies of degree 3 
with kernel isomorphic to /ig as a Gq-module. It then follows that they have 
/x-invariant 1. Denoting either of them by E' , the characteristic ideal of the 
Pontryagin dual of Sel^;'(Q<^)3 is generated by W\. 

Conductor = 306. Take p = 3. We will consider just the elliptic curve 
E defined by + xy = - - %27x + 11097. This is 306(B3) in [Cre]. 
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It is the quadratic twist of 34(A3) by the character lo of conductor 3. The 
Mordell-Weil group is of rank 1, isomorphic to Z x i^l&K). E has 

potentially ordinary reduction at 3, and has good ordinary reduction over 
K = (Q(y^3) at the prime p lying over 3. The unique subgroup <!> of -E(Q) of 
order 3 is contained in the kernel of reduction modulo p for E{K). Although 
the hypotheses of proposition 5.10 are not satisfied by E, the proof can still 
be followed to show that the /x-invariant of Sel£;(Qo2)3 is 0. Let F denote the 
first layer of Q,^, F — (Q(/3) where /3 = C + C^^ i C being a primitive 9-th root 
of unity. The prime 17 splits completely in i^/Q. Using this fact, it is easy to 
verify directly that 

Hom(Gal(F/Q),^) C Sel£(Q)3. 

This clearly implies that ker(Scl£;(Q)3 SelEi^oo)?) is nontrivial. (Contrast 
this with proposition 3.9.) However, we can explain this in the following more 
concrete way, using the results of a calculation carried out by Karl Rubin. 
The point P = (9, 54) on i;(Q) is a generator of i;(Q)/E(Q)tors. But P = 3Q, 
where Q = (-6/32 + 9/3+15, 15/3^-48/3 + 9) is in E{F). This implies that the 
map £;(Q) (g) (Q3/Z3) E{F) ® (Q3/Z3) has a nontrivial kernel. Let be 
the 1-cocycle defined by (t){g) = g{Q) — Q for 5 e Gq. This cocycle has values 
in i?(F)[3], which is easily seen to be just (p = i?((Q)[3], and factors through 
Gal(F/Q). Thus it generates Hom(Gal(f /Q), «?) and is certainly contained 
in SelE(Q)3. 

For n > 1, it turns out that ker(Seli5(Q„)3 Sc\e{<^oo)^) = 0- This 
can be seen by checking that the local condition at any prime of Q„ lying 
above 17 (which will be inert in Qoo/Q„) fails to be satisfied by a nontrivial 
element of Hom(Gal(QQQ/(Q„), ^). The fact that E has split, multiplicative 
reduction at 17 helps here. The argument given in [HaMa] then shows that 
SelB(Qoo)3 proper Tl-submodule of finite index. As remarked above, 

the /u-invariant is 0. A calculation of McCabe for the p-adic L-function as- 
sociated to E combined with Kato's theorem implies that the A-invariant of 
SelB(Qoo)3 is 1. It follows that SelE(Q<^)3 = ^^(Qoo) ® (Qs/^s) = Qs/^s, 
on which F acts trivially. 

Conductor = 26. Consider 26(B1, B2). These curves are related by isogenics 
with kernels isomorphic to iJ.-j and Z/7Z. Let Ei be 26(B1). Then Sel£;i(Q)7 
should be zero. From [Cre], we have C2 = 7, C13 = 1, 07 = 1, and |i?i(Q)| = 7. 
Take p = 7. Theorem 4.1 then impHes that fsAO) ^ 7. Thus, fEi{T) is an 
irreducible element of A. The only nonzero, proper, Gq-invariant subgroup of 
Ei[7] is i?i(Q) = Z/7Z. Although we haven't verified it, it seems likely that 
^Ei = 0. (Conjecture 1.11 would predict this.) If this is so, then A^;^ > 0. 
Let E2 be 26(B2). Then C2 = C13 = 1, ay = 1, and E2{^) = 0. One can 
verify that Sel£2(Q)7 = 0. Then by Theorem 4.1, we have /£;2(0) ~ 7^. Since 
ifEi{T)) and (/bsI^)) can differ only by multiplication by a power of 7, it 
is clear that ,fE2{T) = 7fEi{T), up to a factor in . Thus, IJ.E2 > 1, which 
also follows from proposition 5.7 because £^2 [7] contains the odd, ramified 
Gq-submodule fij. 
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Conductor = 147. Consider 147(B1, B2), which we denote by Ei and 
E2, respectively. They arc related by isogenics of degree 13. For Ei, one has 
C3 = C7 = 1, ai3 = 1, Ei{<^) = 0, and Scl£;,(Q) = 0. Takcp = 13. By theorem 
4.1, fE.iO) ~ 13^. For E2, one has C3 = 13, C7 = 1, aig = 1, i^zCQ) 0, and 
Sel^slQ) = 0. Thus, (0) ^ Since an isogeny Ei ~^ E2 of degree 
13 induces a homomorphism SelBi(Qj^)i3 Sel£;2((Q^)i3 with kernel and 
cokernel of exponent 13, it is clear that /fial^) = 13/£;i(T"), up to a factor 
in . Conjccturally. fiE^ = and hence — 1- Let ^ be the quadratic 
character of conductor 7, which is odd. Then E^ and are the curves 
147(C1, C2). Proposition 5.10 implies that Sel^« ((Qoo)i3 and Sel^|(Q^)i3 

have /i-invariant equal to zero. In fact, for both Ef and E2, we in fact have 
C3 = C7 = 1, ai3 = -1, (Q) = 4(Q) = 0, Selj5e(Q)i3 = Sel^|(Q)i3 = 0. 
By proposition 3.8, we have Selg«(Qoo)i3 = Selg|(Qoo)i3 = 0. 

Conductor = 1225. Consider now Ei : y'^ + xy + y = + x'^ - 8x + 6 
and also E2 : y"^ + xy + y = x^ + x"^ - 208083a; - 36621194. These curves 
have conductor 1225 and are related by a Q-isogeny of degree 37. They have 
additive reduction at 5 and 7. Hence the Tamagawa factors are at most 4. 
The j-invariants are in 2 and so these curves have potentially good reduction 
at 5 and 7. We take p = 37. Since 037 = 8, Ei and E2 have good, ordinary 
reduction at p. Let be the GQ-invariant subgroup of E2 [37] and let ^ = 
-E'2[37]/<P. Thus, <P is the kernel of the isogeny from E2 to Ei. The real periods 
£22 of El, E2 are given by: f2i = 4.1353..., [22 = .11176.... Since 
J7i = 371?2, one finds that $ must be odd. Let (p,'ip be the (2/37Z)^- 
valued characters which describe the action of Gq on <1> and 'P. We can 
regard them as Dirichlet characters. They have conductor dividing 5 • 7 • 37 
and one of them (which we denote by 9) is unramified at 37. By examining 
the Fourier coefficients of the corresponding modular form, one finds that 
is characterized by 0{2) =8 + 372, 6'(13) = 6 + 37Z. The character 9 
is even and has order 12 and conductor 35. But since is odd, we must 
have 6 = i/j. Thus, ^ is odd and ramified at 37. Therefore, by proposition 
5.7, we have fiE2 ^ 1- By using the result given in [Pe2] or [Sch3], one finds 
that fiE2 = f^Ei +1- Conjccturally, ^iE2 = 1; M-Ei — 0- In any case, we have 
i.fE2{T)) = (SlfEAT))- Now £:i(Q) and i^alQ) have rank 1. It is interesting 
to note that the fact that SelBi(Q)37, Sel£;2(Q)37 are infinite can be deduced 
from Theorem 4.1. For if one of these Selmer groups were finite, then so 
would the other. One would then see that both /^^(O) and /e2(0) would 
have even valuation. This follows from Cassels' theorem that |SelBj(Q)| is a 
perfect square for i = 1,2 together with the fact that the Tamagawa factors 
for Ei at 5 and 7 cannot be divisible by 37. But /^alO) ~ 37/3i(0), which 
gives a contradiction. Similar remarks apply to even quadratic twists of Ei 
and E2 ■ 

Now we will state and prove the analogues of propositions 5.7 and 5.10 
for p = 2. It is necessary to define the terms "ramified" and "odd" somewhat 
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more carefully. Assume that E is an elliptic curve/Q with good, ordinary 
or multiplicative reduction at 2. Suppose that is a cyclic G<Q-invariant 
subgroup of E[2°°]. We say that ^ is "ramified at 2" if C C2, where C2 is 
the subgroup of E[2°°] which occurs in the description of the image of the 
local Kummer map for E over (Q2 given in section 2. (It is characterized by 
C2 — fJ-2°° for the action of /q^ . Here /q^ is the inertia subgroup of Gq^ , 
identified with a subgroup of Gq by choosing a prime of Q lying over 2. Then 
D2 = -E[2°°]/G2 is an unramified Ggj^-module.) We say that is "odd" if 
C Goo, where Goc denotes the maximal divisible subgroup of E[2°°] on 
which Gal(C/]R) acts by -1 : Goo = (£^[2°°]-)div Then Goo = Q2/22 as a 
group. Here we identify Gal((D/IR) with a subgroup of Gq by choosing an 
infinite prime of Q. (We remark that Gcc = M2°^ as Gal(C/]R)-modulcs and 
that Gal(€/]R) acts trivially on Doo = E[2°°]/Coo ) Since (p is Gaj-invariant, 
these definitions are easily seen to be independent of the choice of primes of 
Q lying over 2 and over 00. We now prove the analogue of proposition 5.7. 

Proposition 5.13. Suppose that E is an elliptic curve/(Sl with good, ordi- 
nary or multiplicative reduction at 2. Suppose also that i?[2°°] contains a 
G(xi-invariant subgroup $ of order 2"* which is ramified at 2 and odd. Then 
the fx-invariant of SsIe {0,(^)2 is at least m. 

Proof. The argument is virtually the same as that for proposition 5.7. We 
consider Im(e) where e is the map 

e : JfHQi:/Qoo,^) - H\<^^/<^^,En. 

The kernel is finite. Since C G2, the elements of Ini(e) satisfy the local 
conditions defining Sel_E(Qoo)2 at the prime of Qoo lying over 2. Also, just as 
previously, a subgroup of finite index in Im(e) satisfies the local conditions for 
all other nonarchimedean primes of Q^^. Now wc consider the archimedcan 
primes of Qoo- Note that i?^(lR, Goo) — 0. Since C Goo, it is clear that 
elements in Im(e) are locally trivial in i?[2°°]) for every infinite 

prime r] of Qoo- Therefore, Im(e) n Sel£;((QQQ)2 has finite index in Im(e). 

It remains to show that the yl- module ^^^(Q^/Qooj ^) l^as /i-invariant 
equal to m. Since the Gq-composition factors for <1> are isomorphic to 2/22, 
lemma 5.9 implies that the /x-invariant for //^(Q^/Q^^, is at most m. 
On the other hand, the Euler characteristic of the Gal((Q^/{Q„)-module 
is n |^/^^^"|~^, where v runs over the infinite primes of Q„ and £>„ = 

v\oo 

Gal((D/IR) is a corresponding decomposition group. Assume that m > 1. 
Then |c^^"| = 2 and so this Euler characteristic is 2~('"~^)^" for all n > 0. 
Now i?°(Qi;/Q„, ^) just has order 2. As for //■2(Q^/Q„, $), it is known that 
the map 

v|oo 
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is surjective. (This is corollary 4.16 in [Mi].) Since iJ^(D^,<?) has order 2, it 
follows that |iJ2(Q^/Q^,^)| > 22". Therefore, 

The restriction map i?^(Q2;/Qn' ^) ^ -ff^(Qi;/Qcx)' ^)^" surjective and 
has kernel il^(r„, 2/2Z), which has order 2. Thus, 

|ffi(Q^/Q„,#)^''|>2™2'' 

for all n. This implies that H^{Q,j^/(^^,^) has /U-invariant at least m. There- 
fore, the /j-invariant of iJ^(Qj;/Qg^, and hence of Im(e) is exactly m, 
proving proposition 5.13. 

Remark. As we mentioned before (for any p), ii E admits a Q-isogeny of 
degree 2 and if Sel_E(Qo2)2 is yl-cotorsion, then Sel_E(Qoo)2 contains a A- 
submodulc pseudo-isomorphic to yl[2^^]. It is known that there are infinitely 
many elliptic curvcs/Q admitting a cyclic Q-isogeny of degree 16, but none 
with such an isogcny of degree 32. We will give examples below where the 
assumptions in proposition 5.13 are satisfied and |<?| = 2™ with m = 0, 1, 2, 3, 
or 4. For any elliptic curve i?/Q, there is a maximal Gq-invariant subgroup 
^ which is ramified and odd. Define ttie by |<?| = 2™*'. Conjecturally, /xs = 
tue- Thus the possible values of /x_e as varies over elliptic curves/ Q with 
good, ordinary or multiplicative reduction at 2 should be 0, 1, 2, 3, or 4. 
Examples where iie > are abundant. It suffices to have a point P e -B((Q) 
of order 2 such that P € C2 and P G Coo, using the notation introduced 
earlier. If the discriminant of a Weierstrass equation for E is negative, then 
E{JR) has just one component. In this case, Coc[2] = i?(]R)[2] and so if 
P e E{(^) has order 2, then <P = (P) is automatically odd. (Note that 
in this case {IR, E[2°°]) = and so the local conditions at the infinite 
primes of Q^^ occurring in the definition of Scl£(Q3^)2 are trivially satisfied 
anyway.) Similarly, if this discriminant is not a square in Q2 i then ^ = (P) 
is automatically ramified since then C2P] = £'(Q2)[2]• 
We now prove the analogue of proposition 5.10, which gives a sufficient 
condition for /Ue = in case p = 2. 

Proposition 5.14. Suppose that E is an elliptic curve/<Sl with good, ordi- 
nary or multiplicative reduction a,t 2. Suppose also that -E(Q) contains an 
element P of order 2 and that <P = (P) is either ramified at 2 but not odd or 
odd but not ramified at 2. Then SelB(Qoo)2 is A-cotorsion and iie = 0. 

Proof. We must show that Self;(Qoo)2[2] is finite. Consider the map 

aE : i?i(Q^/Q^,i?[2-]) ^ PipL](Q^) 

which occurred in the proof of proposition 5.8. By definition we have 



SelB(Q^)2 C ker(ai5). 
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Under the hypothesis that E admits a Q-rational isogeny of degree 2 (i.e., 
that i?((Q) has an element of order 2), we showed earUer that ker(Q:B)[2] has 
(yl/2yl)-corank equal to 1. Consider the map 

e : if2(Q^/Q^,^) ^ Fi(Q^/Q^,i;[2°°]). 

Then ker(e) is finite and so, by lemma 5.9, Im(e) also has (yl/2yl)-corank 

equal to 1. 

Assume first that <P is odd but not ramified at 2. Then <P C Coo- Since we 
have H^{Sl,Cao) = 0, it is clear that Im(e) C 'ker{aE)- It follows that Im(e) 
has finite index in kcr(Q;£;)[2]. Thus, it suffices to prove that lm(e)nScl£;((QQQ)2 
is finite. To do this, consider the composite map /? defined by the commutative 
diagram 



H\h,D2) 

where tt is the unique prime of (Q^o lyiiig above 2 and is the inertia subgroup 
of <^(Qoo)-- L*^* ^ = kcr(/3). If [a] € iJ^(Qx./Qo^, then the local condition 
defining SelE(Qoo)2 at the prime tt is satisfied by e([(T]) precisely when [a] G 
B. Since <Z> ^ C2, the map E[2°°] D2 induces an isomorphism of to D2[2]. 
Also, since J^- acts trivially on D2, the map {1,^ , D2[2]) iJ^ (1^,1)2) is 
injective. Hence 

B = ker(iJi(Q^/Q^,<Z') ^ H\U,<P)). 

If we let i?„nr(Qoo5^) denote the subgroup of H^{<^^,^) consisting of el- 
ements which are unramified at all nonarchimedean primes of Q^^, then 
iJynr(Qooj^) is a subgroup of B and the index is easily seen to be finite. 
(Only finitely many nonarchimedean primes 77 of exist lying over primes 
in S. iJi((Qoo)r,,^^) is finite if f 2.) Now Gq^ acts trivially on Let 
denote the maximal abelian pro-2 extension of Q^^ which is unramified at all 
nonarchimedean primes of Q^^. Then 

^funr(Qcx>,^) = Hom(Gal(L:,/Q^),#). 

But it is easy to verify that LJ^ = Qj^. (For example, one can note that 
-^ooQoo(*)/Qoo(*) is everywhere unramified. But Qoo(*) = Q(a*2~)- It is known 
that Q(^2") has odd class number for all n > 0. Thus, C C 
Qoc(*)i from which — (Q^^ follows.) Therefore B is finite. Therefore 
Im(e) n Scl£(Qoo)2 is indeed finite. 

Now assume that is ramified at 2 but not odd. Let e be as above. Since 
# is not odd, it follows that _E(IR) must have two connected components. 
Hence, by proposition 5.8, iJi(Q^/Q^, £;[2~])[2] has (yl/2yl)-corank equal 
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to 2. This implies that the (/l/2yl)-corank of iJi(Q^/Q^, £^[2]) is 2. On the 
other hand, H^{{(^^)„, E[2]) also has (yl/2^)-corank equal to 2. Consider 
the map 

We will show that the kernel is finite. It follows from this that the cokernel 
is also finite. We have an exact sequence 

^ # ^ E[2] ^^^0 

of Gq^^-modules, where ^ ^ ^ ^ Z/22. The finiteness of the group B 
introduced earlier in this proof, and the corresponding fact for ^, implies 
rather easily that ker(a) is indeed finite. Consider the map 

b : H\{(Si^)^,E[2]) ^ H\{(Si^)^,D2[2]) 

induced by the map £^[2°°] D2. Since {^oo)-rr has 2-cohomological dimen- 
sion 0, b is surjective. It follows that coker(6 o a) is finite. Using the fact 
that H^{{Q,^)„, D2[2]) has (7l/2^)-corank 1, we see that ker(6o a) also has 
(yl/2yl)-corank 1. Consider the map 

7E : H\(^^/(^^,E[2^]) ^ H\{(^^)^,D2). 

The above remarks imply easily that ker(7£;)[2] has (yl/2yl)-corank equal to 
1. 

The rest of the argument is now rather similar to that for the first case. 
It is clear that Im(e) C ker(7^;) since ^ C C2. Thus, Im(e) has finite index in 
ker(7B)[2]. Also, by definition, we have 

SelB(Q^)2 C ker(7B). 

It then suSices to show that Im(e) fl SelB(Q(x))2 is finite. To do this, we 
consider the composite map 5^ defined by the following commutative diagram. 




where 77 is any infinite prime of Q^^. If [a] E H^{Q^jj/(S^^,<P), then the lo- 
cal condition defining Sel£;(QoQ)2 at rj for the element e{[a]) would imply 
that ^J7([cr]) = 0. But since $ % Coo, ^ is identified with -Doo[2]. The map 
H^{WL,Doo[2]) H^{M,Doo) is injective since Gal(C/lR) acts trivially on 
Doo- Hence 

ker(<5^) = ker(i/i(Q^/Q^,#) ^ ili((Q^)^, 
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By lemma 5.9, we know that P|^ker((5^) is finite (where r] varies over all 
the infinite primes of Qoo- It follows from this that Im(e) n Sel£;(Q3o)2 is 
also finite. This implies that Sel£;(Qo<3)2[2] is finite, finishing the proof of 
proposition 5.14. ■ 



We now consider various examples. 

Conductor = 15. There are eight curves of conductor 15, all related by 
Q-isogenies whose degrees are powers of 2. We will let Ei denote the curve 
labeled Ai in [Cre] for 1 < i < 8. The following table summarizes the situation 
for p = 2. 





El 


E2 


E3 


Ei 


E5 




Er 


Es 


|m| = 


1 


1 


1 


1 


1 


1 


1 


1 


|T| 


8 


4 


8 


8 


2 


2 


4 


4 


C3,C5 = 


2,4 


2,2 


2,2 


2,8 


2,1 


2,1 


1,1 


1,1 




2 


4 


1 


4 


8 


8 


1 


1 




1 


2 





2 


3 


3 









For conductor 15, the Sclmcr group Scl^;, (Q3^)2 has A-invariant equal to 
and the /i-invariant varies from to 3. Now III = Scl£;(Q). Its order was 
computed under the assumption of the Birch and Swinnerton-Dyer conjec- 
ture by evaluating L(£'i/(Q, l)/nEi - The real period i^g. was computed using 
PARI. |T|, C3, and C5 are as listed in [Cre]. Using the fact that a2 = —1, and 
hence |£^i(F2)| = 4 for each i, the fourth row is a consequence of theorem 
4.1. In particular, it is clear that fEs{T) G . Hence = = 0. The 
A-invariant of Sel^. (Q;^)2 is unchanged by a Q-isogeny. Hence Ab- = for 
all i. It is then obvious that fEi{0) ^ 2'*®*, which gives the final row. 

It is not difficult to reconcile these results with propositions 5.13 and 
5.14. For example, consider E3 : y"^ + xy + y = x'^ + x"^ — 5x + 2. We have 
£3(2] ^ (Z/2Z)2. The points of order 2 are (1,-1), (|,-|), and (-3,1). 
The second point generates C2 [2] ; the third point generates Coo [2] • (Remark: 
It is not hard to find the generator of Coo [2]. It is the point in i?(IR)[2] 
whose a;-coordinate is minimal.) Thus, i?3(Q)[2] contains a subgroup which 
is ramified at 2 but not odd and another subgroup which is odd but not 
ramified at 2. Proposition 5.14 implies that 11E3 = 0. Similarly, one can verify 
that HE, = MBs = 0- Both Er{(^)[2] and Es{(il)[2] have order 2. £;7(Q)[2] is 
ramified at 2 but not odd. £'8(Q)[2] is odd but not ramified at 2. Proposition 
5.14 again applies. 

The /^-invariants listed above turn out to be just as predicted by propo- 
sition 5.13. One can deduce this from the isogeny data given in [Cre]. One 
uses the following observation. Suppose that ip : E ^ E' is a (i^-isogeny such 
that = kcr((y9) is ramified and odd. Suppose also that i?'[2°°] contains a 
dl-rational subgroup which is ramified and odd. Then is ramified 
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and odd too. Its order is |^| • |^'|. For example, -E2(Q) has three subgroups 
of order 2, one of which is ramified and odd. There is an Q-isogcny of degree 
2 from E2 to Ei, E5, and Eg. One can verify that Ei{^), E^iq,), and £'6(Q) 
each has a subgroup of order 2 which is ramified and odd. Thus, i?2[2°°] must 
have a subgroup <!>' of order 4 which is ramified and odd. Now <P = i?5(Q)[2] 
is of order 2, generated by (— This # is ramified and odd. Since 
E'g/t? ^ E2, it follows that i?5[2°°] has a ramified and odd Q-rational sub- 
group of order 8. Thus, proposition 5.13 implies that /x^s > 3. 

Conductor — 69. There are two such elliptic curves i?/(Q. Both should 

have |IIl£((Q)| = 1 and |-E(Q)| = 2. For one of them, we have C3 = 1, 
C23 = 2. For the other, C3 ~ 2, C23 = 1. We have 02 = 1 and so |iJ(F2)| = 2. 
By theorem 4.1, we have /^(O) ^ 2. Hence ,fE{T) is an irreducible element 
of A. Now let <P = -E'(Q) = 2/2Z. For one of these curves, (p is ramified 
at 2 but not odd. For the other, <P is odd but not ramified at 2. Hence 
proposition 5.14 implies that /^b = 0. Since Je{T) ^ /l^, it follows that 
Xe > 1. In fact, it turns out that = A^^"^ = l, A™ = 0, and /^(r) = 
T + 2, up to a factor in . To see this, consider the quadratic twist E^, 
where ^ is the quadratic character corresponding to Q(\/2). Now S^(Q) has 
rank 1. Therefore, i^((Q(-\/2)) has rank 1. But Q(-\/2) is the first layer in the 
cyclotomic Z2-extension Qoo/Q- Therefore, Sel£;(QoQ)2 contains the image of 
£^(Q(-\/2)) ® (Q2/^2) under restriction as a yl-submodule. Its characteristic 
ideal is (T + 2). The assertions made above follow easily. 

Conductor = 195. We will discuss the isogeny class consisting of A1-A8 
in [Cre] . Some of the details below were worked out by Karl Rubin and myself 
with the help of PARI. We denote these curves by Ei, . . . ,Es, respectively. 
We will show that A^^ = X^~^ = 3, A™. = 0, and that 11 Ei varies from to 
4 for 1 < i < 8. Here is a table of the basic data. 





r 


E2 


^3 


E4 


^5 


Eq 


Ej 


Es 


|m| = 


1 


1 


1 


1 


1 


1 


4 


1 


\T\ = 


4 


8 


8 


4 


4 


4 


2 


2 


,Cl3 = 


4,1,1 


8,2,2 


4,4,4 


16,1,1 


2,8,2 


2,2,8 


1,4,1 


1,16, 




4 


8 


16 


16 


32 


32 


64 


64 







1 


2 


2 


3 


3 


4 


4 



As before, we evaluated |IH| by assuming the Birch and Swinnerton-Dyer 
conjecture. But one could confirm directly that |ni2| is as listed, which would 
be sufficient for us. [Cre] gives |r| and the Tamagawa factors C3, C5, and C13. 
The fourth row is a consequence of theorem 4.1. Since the A^j/s are equal, 
clearly the /^-invariants must vary. The last row becomes clear if we can show 
that fiEi = 0. Unfortunately, this does not follow from proposition 5.14. The 
problem is that = £^(Q)[2] is of order 2, but is neither ramified at 2 nor 
odd. In fact, # is generated by (6, —3), which is clearly not in the kernel of 
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reduction modulo 2 and so is not in C2. Also, i?(IR)[2] has order 4 and (6, —3) 
is in the connected component of Oe- This implies that (6, —3) ^ Coo- 

We will verify that = by showing that fsi {T) is divisible by g{T) = 
(T + 2)(r2 + 2T + 2) in A. Since the characteristic ideals of Selij^((Qo„)2 
differ only by multiplication by a power of 2, it is equivalent to show that 
g{T) divides /ij,(r) for any i. It then follows that {fE^{T)) = {g{T)) since 
fsiiO) and g{0) have the same valuation. Therefore, ^Ei must indeed be 
zero. Let F and K denote the first and second layers in the cyc;lotomic 
extension Qoo/Q- Thus Gal(if/Q) is cyclic of degree 4 and F is the unique 
quadratic subfield of K. In fact, F = Q(V2), K = F(v'2 + V^). We will 
show that E2{K)®Q„ considered as a Q-representation of Gal(-fS'/Q) contains 
the two nontrivial, (Q-irrcduciblc representations of Gal(ii'/Q). One of them 
has degree 1 and factors through Gal(F/Q). The other has degree 2 and is 
faithful. The fact that g{T) divides fE2{T), and hence follows easily. 

The equation y'^+xy = .x"^— 115.T+392 is the minimal Weierstrass equation 
defining £2- It is slightly more convenient to calculate with the nonminimal 
equation y'^ = (x — l){x — 2)(16a; + 49), obtained by a simple change of 
variables. We single out the following two points satisfying this equation: 

P = (0, 7\/2) , g = ^10 + 9V2, (123 + 78V2) ^J2 + V2^ . 

Now P is rational over F, Q is rational over K. To study E2{K), it is useful 
to first determine its torsion subgroup. In fact, we have 

S2(Qoo)tors = S2(Q)tors - (2/22) X (Z/42). 

The structure of £'2(Q) is given in [Ore]. It is easy to see that i?2(Qoo)tors 
is a 2-primary group since E2 has good reduction at 2, 2 is totally ramified 
in Qo„/Q, and |£;2(IF2)| = 4. Now is totally real and so E2i<^^)tovs = 
2/2Z X Z/2*2 where t > 2. Assume t > 3. Then £'2(Qoo)tors would have 
8 elements of order 8. Since their squares are in £^2(Q), the orbit under 
r = Gal(Q3c/Q) of an element of order 8 has cardinality at most 4. Hence 
such an clement would be rational over K. We can rule out this possibility 
by noting that E2 has good reduction at 31, 31 splits completely in if/Q, 
and |£2(IF3i)| = 40, which is not divisible by 16. 

It is now clear that P and Q have infinite order. Also, Gal(F/(Q) acts on 
(P) by -1 since (0, -7V2) = -P. Thus, (P) (g) Q is a Gal(if/Q)-invariant 
subspace of E2(K) (g) Q giving the degree 1, nontrivial representation of 
Gal(i4r/Q). Similarly, Q belongs to kcr(Trx/i^), the kernel of the trace map 
from E2{K) to E2{F). Thus, kcr(rrx/i?)® Q is nonzero and provides at least 
one copy of the 2-dimensional, irreducible (Q-representation of Gal(iir/Q). 
Therefore, rank(_E2(^i')) > 3. Considering the action of 7 = 1 + T on the im- 
age of E2{K) (g) ({^2/^2) in Sc\e2 (Qoc)2 makes it clear that g{T) docs indeed 
divide .fel^); as claimed. As noted above, it now follows that {fEi{T)) = 
{g{T)). This implies that A^i = 3, fiEi = 0. More precisely, it is clear that 
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\M-w _ 3^ _ Q Pqj. ^jjg Q-isogenous curves Ei, 1 < i < 8, we also have 
Xi;"^ = 3, A™ = 0, but^ UeAT)) = (2'^-^5(T)). 

One can verify that in this example /i^;. = m^;. . It is not hard to prove 
the existence of a GQ-invariant subgroup of i?i[2°°] with the expected 
order satisfying the hypotheses of proposition 5.13. Just as for conductor 15, 
one uses the (Q-isogcnics between the EiS. By direct verification, one finds 
that Ej\2] contains a ramified, odd G^-invariant subgroup for i = 2, . . . ,8. 
The listed isogenics then imply that £'i[4] has a ramified, odd Gq-invariant 
subgroup of order 4 for i = 3. . . . ,8. Then one sees that £^^[8] contains such 
a subgroup of order 8 for i = 5, . . . ,8. Finally, both £^7 and Eg admit Q- 
isogcnies of degree 2 to £5. The kernels of these Q-isogenies are ramified and 
odd. The inverse image of the ramified, odd, Gq-invariant subgroup of 
£5 [8] will be the ramified, odd, GQ-invariant subgroup <l>i of £i[16] of order 
16, for i = 7 or 8. 

Ken Kramer has found a description of the family of elliptic curves/Q 
which satisfy the hypotheses of proposition 5.13 for m = 1, 2, 3, and 4. Here we 
will give his description for m = 1 and m = 4, with the additional condition 
that E have square- free conductor. For m = 1, his family is 

E -.y^ + xy = - ax^ - 4bx + (4a - 1)6, <P = 

where a,,b E 2, gcdiAa — 1,6) = 1, (4a — 1)^ > 646, and either a or 6 is 
negative. The last conditions assure that <1> C Goo- (If 6 < 0, then E(5R) 
has only one connected component. Then $ is automatically contained in 
Goo- If 6 > and a < 0, then the inequality 1 — 4a > sVb implies that the 
above generator of is the element of £(]R)[2] with minimal a;-coordinate.) 
The discriminant of this equation, which is minimal, is 6((4a — 1)^ — 646)^. 
If 6 is odd, then E has good, ordinary reduction at 2. Conjccturally, this 
family should give all elliptic curves/Q with good, ordinary or multiplicative 
reduction at 2 and square-free conductor such that SelE(Qoo)2 has positive 
/X- invariant. Kramer describes the elliptic curves with square- free conductor 
having a subgroup of order 16 which is ramified and odd by the following 
equation: 

E:y'^ = {x + 2c^- d^){x'' + A{cd)^ - 4c«) 

where c, d are distinct odd, positive integers, c = ci(mod 4), and gcd{c, d) = 1. 
This equation is not minimal, but the discriminant of a minimal Weierstrass 
equation for E is (c^ — d'^)c'^d^^ / 16. Interchanging c and d gives a second 
elliptic curve, Q-isogenous to £, but with discriminant of opposite sign. Thus, 
there are an even number of such elliptic curves in a Q-isogeny class. A similar 
statement is true for m = 2 or 3, as Kramer shows. We refer to [K] for a more 
complete discussion. 

We will end this article by returning to some of our earlier examples and 
discussing a few other examples, but now using Kato's theorem in conjunction 
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with some calculations recently carried out by Ted McCabe. Assume that 
E is a. modular elliptic curve/Q and that p is a prime where E has good, 
ordinary reduction. Kato's theorem asserts that fsiT) divides p'"/™'*'(T) 
in A for some m > 0. Let Af'^' and denote A(/|"^') and nifW )■ Kato's 
theorem implies that < A^'''. McCabe has calculated approximations to 
the first few coefficients when f^^^{T) is written as a power series in T, 
enough to verify that /U^**' = and to determine A™^' for the examples 
he considers. These calculations allow us to justify several statements that 
were made earlier. As previously, we will use the value of |SelB(Q)p| which 
is predicted by the Birch and Swinnerton-Dyer conjecture. In [M-SwD], one 
finds the results of calculations of the p-adic L-functions for the elliptic curves 
of conductors 11 and 17 and all primes < 100. 

Kato's theorem reduces the verification of conjecture 1.13 to showing that 
Ab = A^**' and he = /x^'''. In a number of the following examples, these 
equalities can be shown. Before discussing the examples, we want to mention 
two situations which occur rather frequently. 

A^"'''= /i^"=^'= 0. This means that f'^''\T) e yl^. By Kato's theorem, 
it follows that \e = 0. Also, /|;"'''(0) = (1 - Ppp-'^fL{E/(^,l)/QE is a 
p-adic unit. Kolyvagin's theorem can then be used to verify the Birch and 
Swinnerton-Dyer conjecture, i.e., that Sel£;(Q)p has the predicted order. Then 
by theorem 4.1, one would obtain that /b(0) e 2^ too. That is, fsiT) e 
and hence he = and conjecture 1.13 is valid for E and p. 

Al"'"' = 1, /Lt|,"«' = 0. We will also assume that p is odd. Since Al"''^ = 1, 
jw&ifrp-^ has exactly one root: T = a, where a € p2p. We mentioned in the 
introduction that f%''''\T') / f'^'^^T) e yl^ , where T' = (1 + T)"! - 1. Thus 
(l + a)-i-l is also a root of /|;"'''(r). It follows that {l + af = 1 and, since p 
is odd, a = 0. (For p = 2, we would have another possibility: a = —2.) Hence 
/|,nai(0) = and so T\f^^''\T). We then must have f'^''\T)/T e A'^ . The p- 
adic i-function Lp{E/<^, s) would have a simple zero at s = 1. Assuming that 
E has good, ordinary reduction at p, the complex L-function L{Em, s) would 
have an odd order zero at s = 1. (The "signs" in the functional equations 
for ip(£'/Q,s) and L(i;/Q,s) are the same. See [M-T-T].) Pcrrin-Riou's 
analogue of the Gross-Zagier formula implies that L'{E/^,1) ^ 0. Hence 
rank(i;(Q)) = 1. Consequently, /is(0) = 0, A^ = 1, and /^(r) = p^"^T, 
up to a factor in yl^. Furthermore, Perrin-Riou's formula also shows that 
hp{P) ^ 0, where P is a generator of £'(Q)/iJ(([J)tors, and that 

hp{P) ~ p{l - l3pp-^)-\L'{E/(Si, l)/QEh^{P))-\ 

Kolyvagin's theorem should allow one to verify that L'{E/(^, 1) / QEhoo{P) ^ 
( n cl^^)|niE(Q)p|/|i;(Q)pp. If one then uses Schneider's result (for the 

V bad 

case F = Q,r = 1), one would obtain that fE{T)/T E A^ , thus verifying 
that Xe = 1, He = 0, and that conjecture 1.13 is valid for E and p. 
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Conductor = 67. We consider p = 3. As expected, /uf^' = 0. We can't 
verify that fiE = 0, as conjecture 1.11 predicts. {E[3] is irreducible as a Gq- 
module.) McCabe finds that A^'^' — 2. As pointed out earher, Sel£;(Qoo)3 
is infinite. Hence, assuming that — 0, we have Xe > 0. By proposition 
3.10, Xe must be even. Thus, = 2. Hence, if fXE = 0, it is clear from 
Kato's theorem, that (/^(r)) = (/^"'^'(T)), i.e., conjecture 1.13 holds for 
E and p = 3. In fact, we would have X^'^ = and A™ = 2. To see this, 
suppose that X^~^ > 0. Now F acts in the finite-dimensional (Q-vector space 
-^(Qoo) ® ^- The irreducible (Q-representations of F have degrees 1, 2, 6, ... , 
2 • 3"-i for n > 1. Since E{<^) is finite and A^ = 2, we would have X^'^ = 2 
and rank{E{(£li)) = 2, where is the first layer in Qoo/Q. This would imply 
that g{T) = T"^ + 3T + 3 divides /^(r). Hence g{T) and /^(T) would differ 
by a factor in which is impossible since /£;(0) ^ 3^, .g(0) ~ 3. 

Conductor = 915. We consider again the elliptic curve E corresponding 
to 915(A1) in [Cre]. We take p = 7 or p = 43. In both cases, McCabe finds 
that Al"'^' = 2. Thus, Xe < 2. It is then clear that Af = 0. For the only 
irreducible (Q-representation of F with degree < 2 is the trivial representation. 
(The nontrivial irreducible Q-representations have degree divisible by p — 1.) 
But £"((5) is finite in this case. Hence, assuming that /ig = 0, we have A™ = 2 
for both p = 7 andp = 43. Also, just as for the preceding example, conjecture 
1.13 would hold if ij,e = 0. 

Conductor = 34. We considered before the elliptic curve E correspond- 
ing to 34(A1) in [Cre] and found that Af = 2, Xf = 0, and /i^ = for 
p = 3. In this case, McCabe finds that Xf""^ = 2 and /xf^'^' = 0. Thus, Kato's 
theorem again implies conjecture 1.13: (/^(T)) = (f^'^'^T)) forp = 3. There 
are four elliptic curves of conductor 34, all Q-isogenous. In general, conjec- 
ture 1.13 is preserved by Q-isogeny. The power of p dividing fE{T) changes 
in a way predicted by the result of [Sch3] or [Pe2] . The power of p dividing 
janaij-'ji-j changes in a compatible way, determined just by the change in He- 
[fls is the only thing that changes in the definition of f^'^^lT).) One can 
verify all of this directly. For E, PARI gives fls = 4.4956 .... Let be 
34(A3) in [Cre], which is related to by a Q-isogeny of degree 3. Using the 
fact that iJLE = 0, one fines that jis' = 1- Therefore, fE'{T) = 3/b(T'). But 
PARI gives Oe' = 1.4985 . . . = Oe/S. (This must be exact.) Thus, one sees 
that f%'}^\T) = 3/|;"^'(T). Conjecture 1.13 is valid for E' too. 

Conductor = 26. We take p — 7. For 26(B1), which wo previously 
denoted by Ei, McCabe finds that /xf^'^' = 0, Af^^^ 4, and /If \0) ~ 7. 
Thus, /|;"'*'(r) is an irreducible element of A. li fiEi = 0, as conjecturally 
should be true, then Kato's theorem implies that fEi{T) = ^iP to 

a factor in . Conjecture 1.13 would then be valid for Ei (and for E2 too). 
Thus, in this example, if /i^^ = 0, then Xei =4. Note that proposition 3.10 
would tell us only that Xe^ is even. Also, just as in the example of conductor 
915, we would have A^;^ = 0, A^^^ = 4. 
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Conductor = 147. Let p = 13. We will denote 147(B1, B2) by Ei and 
E2 as earlier. McCabe's calculation for 147B1 gives 11'^^^^ = 0, Af'^''*' = 2. 
Proposition 3.10 shows that Xei is even. If fiEi = 0, as conjecture 1.11 
predicts, then A^i > 0. Hence A^^ = 2 and conjecture 1.13 would again follow 
from Kato's theorem. As in previous examples, we would have X^'^ = 0, 

Ail = 2. 

Conductor = 1225. We consider again the two curves Ei and E2 of 
conductor 1225 discussed earlier. We take p = 37. McCabe finds that A^**' = 
1, = 0. Since i:(£;i/Q,l) = 0, it follows that /|7'(0) = and that 

fET^{T)/T e . As remarked carHcr, it then should follow that Xe^ = 1, 
fiEi = and that conjecture 1.13 holds. For E2, we have Xe2 = 1) I^E2 = 1- 
Conjecture 1.13 holds for E2 too. 

Conductor = 58. We consider E' : + xy = — x"^ — x + 1 and p = 5. 

In this case, -E'((Q) = Z and the predicted order of ni£;/((Q) is 1. McCabe 
finds that A|r' = 1, nf,""^ = 0. It then follows that Xe' = 1, ^J.E' = 0. 

Conductor = 406. Consider E : y'^ + xy ^ + x'^ - 2124x - 60592. 
This is 406(D1) in [Crc]. We take p = 5. We have C2 = C29 = 2, 07 = 5, 
|i?((Q)| = 2, and Scl£;(Q) is predicted to have order 1. Thus, by theorem 4.1, 
/£;(0) ~ 5. Now it turns out that E[5] = E'[5] as G(Ej-modules, where E' is the 
elliptic curve of conductor 58 considered above. One verifies this by comparing 
the (7-expansions of the modular forms corresponding to these curves. Since 
He' — 0, it follows that jiE — 0. Therefore, A^; > 1. By proposition 3.10 
A^; must be even. However, 7 splits completely in Q^/Q, where Qj^ denotes 
the first layer of the cyclotomic Z5-extension Q^^ of Q. (This is because 
7^ = l(mod 5^).) Thus, there arc 5 primes of Qj^ lying over 7, each with 
Tamagawa factor equal to 5. The proof of corollary 5.6 can be used to show 
that A^; > 5 and hence, since it is even, we must have A^; > 6. McCabe finds 
that Alf'^' = 6, = 0. Therefore, it follows that Xe = 6, /i^ = 0, and 

conjecture 1.13 holds for E and p — 5. We also can conclude that Af "^^ = 0. 
This is so because -E(Q) is finite, E{(ii^) (g) Q is a finite dimensional Q- 
representation of F, and the nontrivial irreducible Q-representations of F 
have degree divisible by 4. Hence SelB(Q(x))5 — ^^{(^^00)5 ^^'^ A™ = 6. 
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